id: "AC-18(01)" title: "Authentication and Encryption" family: "AC" family_name: "Access Control" sort_id: "ac-18.01" priority: "P1" implementation_level: "system" parent: "AC-18" enhancement: True


Statement

Protect wireless access to the system using authentication of {{ insert: param, ac-18.01_odp }} and encryption.

Guidance

Wireless networking capabilities represent a significant potential vulnerability that can be exploited by adversaries. To protect systems with wireless access points, strong authentication of users and devices along with strong encryption can reduce susceptibility to threats by adversaries involving wireless technologies.

Assessment Objective: wireless access to the system is protected using authentication of {{ insert: param, ac-18.01_odp }};

Assessment Objective: wireless access to the system is protected using encryption.

Access control policy

procedures addressing wireless implementation and usage (including restrictions)

system design documentation

system configuration settings and associated documentation

system audit records

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

system developers

Mechanisms implementing wireless access protections to the system