id: "AC-17(03)" title: "Managed Access Control Points" family: "AC" family_name: "Access Control" sort_id: "ac-17.03" priority: "P1" implementation_level: "system" parent: "AC-17" enhancement: True
Statement
Route remote accesses through authorized and managed network access control points.
Guidance
Organizations consider the Trusted Internet Connections (TIC) initiative DHS TIC requirements for external network connections since limiting the number of access control points for remote access reduces attack surfaces.
Assessment Objective
remote accesses are routed through authorized and managed network access control points.
Access control policy
procedures addressing remote access to the system
system design documentation
list of all managed network access control points
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
System/network administrators
organizational personnel with information security responsibilities
Mechanisms routing all remote accesses through managed network access control points