id: "AC-17(09)" title: "Disconnect or Disable Access" family: "AC" family_name: "Access Control" sort_id: "ac-17.09" priority: "P1" implementation_level: "organization" parent: "AC-17" enhancement: True


Statement

Provide the capability to disconnect or disable remote access to the system within {{ insert: param, ac-17.09_odp }}.

Guidance

The speed of system disconnect or disablement varies based on the criticality of missions or business functions and the need to eliminate immediate or future remote access to systems.

Assessment Objective

the capability to disconnect or disable remote access to the system within {{ insert: param, ac-17.09_odp }} is provided.

Access control policy

procedures addressing disconnecting or disabling remote access to the system

system design documentation

system configuration settings and associated documentation

security plan, system audit records

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

system developers

Mechanisms implementing capability to disconnect or disable remote access to system