---

id: "AC-18" title: "Wireless Access" family: "AC" family_name: "Access Control" sort_id: "ac-18" priority: "P1" implementation_level: "organization" enhancements: - ac-18.1 - ac-18.2 - ac-18.3 - ac-18.4 - ac-18.5

---

Establish configuration requirements, connection requirements, and implementation guidance for each type of wireless access; and

Authorize each type of wireless access to the system prior to allowing such connections.

Guidance

Wireless technologies include microwave, packet radio (ultra-high frequency or very high frequency), 802.11x, and Bluetooth. Wireless networks use authentication protocols that provide authenticator protection and mutual authentication.

Assessment Objective: configuration requirements are established for each type of wireless access;

Assessment Objective: connection requirements are established for each type of wireless access;

Assessment Objective: implementation guidance is established for each type of wireless access;

Assessment Objective: each type of wireless access to the system is authorized prior to allowing such connections.

Access control policy

procedures addressing wireless access implementation and usage (including restrictions)

configuration management plan

system design documentation

system configuration settings and associated documentation

wireless access authorizations

system audit records

system security plan

other relevant documents or records

Organizational personnel with responsibilities for managing wireless access connections

organizational personnel with information security responsibilities

Wireless access management capability for the system