---

id: "AC-03(12)" title: "Assert and Enforce Application Access" family: "AC" family_name: "Access Control" sort_id: "ac-03.12" priority: "P1" implementation_level: "system" parent: "AC-03" enhancement: True

---

Require applications to assert, as part of the installation process, the access needed to the following system applications and functions: {{ insert: param, ac-03.12_odp }};

Provide an enforcement mechanism to prevent unauthorized access; and

Approve access changes after initial installation of the application.

Guidance

Asserting and enforcing application access is intended to address applications that need to access existing system applications and functions, including user contacts, global positioning systems, cameras, keyboards, microphones, networks, phones, or other files.

Assessment Objective: as part of the installation process, applications are required to assert the access needed to the following system applications and functions: {{ insert: param, ac-03.12_odp }};

Assessment Objective: an enforcement mechanism to prevent unauthorized access is provided;

Assessment Objective: access changes after initial installation of the application are approved.

Access control policy

procedures addressing access enforcement

system design documentation

system configuration settings and associated documentation

system audit records

system security plan

other relevant documents or records

Organizational personnel with access enforcement responsibilities

system/network administrators

organizational personnel with information security responsibilities

Mechanisms implementing access enforcement functions