id: "AC-18(04)" title: "Restrict Configurations by Users" family: "AC" family_name: "Access Control" sort_id: "ac-18.04" priority: "P1" implementation_level: "organization" parent: "AC-18" enhancement: True
Statement
Identify and explicitly authorize users allowed to independently configure wireless networking capabilities.
Guidance
Organizational authorizations to allow selected users to configure wireless networking capabilities are enforced, in part, by the access enforcement mechanisms employed within organizational systems.
Assessment Objective: users allowed to independently configure wireless networking capabilities are identified;
Assessment Objective: users allowed to independently configure wireless networking capabilities are explicitly authorized.
Access control policy
procedures addressing wireless implementation and usage (including restrictions)
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
System/network administrators
organizational personnel with information security responsibilities
Mechanisms authorizing independent user configuration of wireless networking capabilities