# NIST 800-171 3.1.17 Protect wireless access using authentication and encryption

- Source: https://support.icompaas.com/support/solutions/articles/62000229253-nist-800-171-3-1-17-protect-wireless-access-using-authentication-and-encryption
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [NIST](https://support.icompaas.com/support/solutions/62000112528) › [800-171](https://support.icompaas.com/support/solutions/folders/62000168440)
- Last updated: 2026-05-29
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description:** 

Organizations authenticate individuals and devices to help protect wireless access to the system. Special attention is given to the wide variety of devices that are part of the Internet of Things with potential wireless access to organizational systems. See \[NIST CRYPTO\]. 

  

**Priority:** High 

  

**Category: Network Security** 

  

**Services Associated with AWS:** 

-   AWS Identity and Access Management (IAM), AWS Directory Service, AWS IoT Core
-   AWS Certificate Manager, AWS IoT Core, AWS Key Management Service (KMS)

  

**Objective Evidence:** 

-   Administrative: documented policies, standards & procedures 
-   Administrative: supporting documentation to demonstrate the "secure practices" used to build technology platform-specific secure baseline configurations 
-   Technical: screen shot of wireless settings  
    

  

**Possible Technology Considerations:** 

-   Secure Baseline Configurations (SBC)  
    

  

**What needs to be answered:** 

Is wireless access restricted to authorized users and encrypted according to industry best practices? (FIPS 140) 

-   Implement Authentication for Wireless Access  
    Description: This check ensures that authentication mechanisms are implemented to protect wireless access to the system. Organizations should authenticate both individuals and devices, especially considering the diverse range of devices in the Internet of Things (IoT) with potential wireless access to organizational systems.
-   Enable Encryption for Wireless Access  
    Description: This check verifies that encryption is enabled for wireless access to provide confidentiality and integrity of data transmitted over wireless networks. Encryption helps protect sensitive information from unauthorized interception and tampering.

  

**More details:** CUI contained on cloud based systems and not on internal network.

## Related compliance guidance

- [NIST SP 800-53 Rev. 5: a practical implementation guide for cloud teams](https://support.icompaas.com/compliance/nist-sp-800-53-rev-5): How the 800-53 catalogue, baselines and the Risk Management Framework fit together, and which controls take the most work in the cloud.
- [NIST SP 800-171 and CMMC: a practical guide to protecting CUI in the cloud](https://support.icompaas.com/compliance/nist-sp-800-171-rev-3): If the driver is a DoD or federal contract handling CUI, 800-171 (and CMMC) is the scope you actually need.