AC — Access Control
NIST SP 800-53 Rev. 5 Controls
131 articles
- NIST SP 800-53 Rev. 5 AC-1 — Policy And Procedures
- NIST SP 800-53 Rev. 5 AC-2 — Account Management
- NIST SP 800-53 Rev. 5 AC-2(1) — Automated System Account Management
- NIST SP 800-53 Rev. 5 AC-2(2) — Automated Temporary And Emergency Account Management
- NIST SP 800-53 Rev. 5 AC-2(3) — Disable Accounts
- NIST SP 800-53 Rev. 5 AC-2(4) — Automated Audit Actions
- NIST SP 800-53 Rev. 5 AC-2(5) — Inactivity Logout
- NIST SP 800-53 Rev. 5 AC-2(6) — Dynamic Privilege Management
- NIST SP 800-53 Rev. 5 AC-2(7) — Privileged User Accounts
- NIST SP 800-53 Rev. 5 AC-2(8) — Dynamic Account Management
- NIST SP 800-53 Rev. 5 AC-2(9) — Restrictions On Use Of Shared And Group Accounts
- NIST SP 800-53 Rev. 5 AC-2(11) — Usage Conditions
- NIST SP 800-53 Rev. 5 AC-2(12) — Account Monitoring For Atypical Usage
- NIST SP 800-53 Rev. 5 AC-2(13) — Disable Accounts For High-Risk Individuals
- NIST SP 800-53 Rev. 5 AC-3 — Access Enforcement
- NIST SP 800-53 Rev. 5 AC-3(2) — Dual Authorization
- NIST SP 800-53 Rev. 5 AC-3(3) — Mandatory Access Control
- NIST SP 800-53 Rev. 5 AC-3(4) — Discretionary Access Control
- NIST SP 800-53 Rev. 5 AC-3(5) — Security-Relevant Information
- NIST SP 800-53 Rev. 5 AC-3(7) — Role-Based Access Control
- NIST SP 800-53 Rev. 5 AC-3(8) — Revocation Of Access Authorizations
- NIST SP 800-53 Rev. 5 AC-3(9) — Controlled Release
- NIST SP 800-53 Rev. 5 AC-3(10) — Audited Override Of Access Control Mechanisms
- NIST SP 800-53 Rev. 5 AC-3(11) — Restrict Access To Specific Information Types
- NIST SP 800-53 Rev. 5 AC-3(12) — Assert And Enforce Application Access
- NIST SP 800-53 Rev. 5 AC-3(13) — Attribute-Based Access Control
- NIST SP 800-53 Rev. 5 AC-3(14) — Individual Access
- NIST SP 800-53 Rev. 5 AC-3(15) — Discretionary And Mandatory Access Control
- NIST SP 800-53 Rev. 5 AC-4 — Information Flow Enforcement
- NIST SP 800-53 Rev. 5 AC-4(1) — Object Security And Privacy Attributes
- NIST SP 800-53 Rev. 5 AC-4(2) — Processing Domains
- NIST SP 800-53 Rev. 5 AC-4(3) — Dynamic Information Flow Control
- NIST SP 800-53 Rev. 5 AC-4(4) — Flow Control Of Encrypted Information
- NIST SP 800-53 Rev. 5 AC-4(5) — Embedded Data Types
- NIST SP 800-53 Rev. 5 AC-4(6) — Metadata
- NIST SP 800-53 Rev. 5 AC-4(7) — One-Way Flow Mechanisms
- NIST SP 800-53 Rev. 5 AC-4(8) — Security And Privacy Policy Filters
- NIST SP 800-53 Rev. 5 AC-4(9) — Human Reviews
- NIST SP 800-53 Rev. 5 AC-4(10) — Enable And Disable Security Or Privacy Policy Filters
- NIST SP 800-53 Rev. 5 AC-4(11) — Configuration Of Security Or Privacy Policy Filters
- NIST SP 800-53 Rev. 5 AC-4(12) — Data Type Identifiers
- NIST SP 800-53 Rev. 5 AC-4(13) — Decomposition Into Policy-Relevant Subcomponents
- NIST SP 800-53 Rev. 5 AC-4(14) — Security Or Privacy Policy Filter Constraints
- NIST SP 800-53 Rev. 5 AC-4(15) — Detection Of Unsanctioned Information
- NIST SP 800-53 Rev. 5 AC-4(17) — Domain Authentication
- NIST SP 800-53 Rev. 5 AC-4(19) — Validation Of Metadata
- NIST SP 800-53 Rev. 5 AC-4(20) — Approved Solutions
- NIST SP 800-53 Rev. 5 AC-4(21) — Physical Or Logical Separation Of Information Flows
- NIST SP 800-53 Rev. 5 AC-4(22) — Access Only
- NIST SP 800-53 Rev. 5 AC-4(23) — Modify Non-Releasable Information
- NIST SP 800-53 Rev. 5 AC-4(24) — Internal Normalized Format
- NIST SP 800-53 Rev. 5 AC-4(25) — Data Sanitization
- NIST SP 800-53 Rev. 5 AC-4(26) — Audit Filtering Actions
- NIST SP 800-53 Rev. 5 AC-4(27) — Redundant/Independent Filtering Mechanisms
- NIST SP 800-53 Rev. 5 AC-4(28) — Linear Filter Pipelines
- NIST SP 800-53 Rev. 5 AC-4(29) — Filter Orchestration Engines
- NIST SP 800-53 Rev. 5 AC-4(30) — Filter Mechanisms Using Multiple Processes
- NIST SP 800-53 Rev. 5 AC-4(31) — Failed Content Transfer Prevention
- NIST SP 800-53 Rev. 5 AC-4(32) — Process Requirements For Information Transfer
- NIST SP 800-53 Rev. 5 AC-5 — Separation Of Duties
- NIST SP 800-53 Rev. 5 AC-6 — Least Privilege
- NIST SP 800-53 Rev. 5 AC-6(1) — Authorize Access To Security Functions
- NIST SP 800-53 Rev. 5 AC-6(2) — Non-Privileged Access For Nonsecurity Functions
- NIST SP 800-53 Rev. 5 AC-6(3) — Network Access To Privileged Commands
- NIST SP 800-53 Rev. 5 AC-6(4) — Separate Processing Domains
- NIST SP 800-53 Rev. 5 AC-6(5) — Privileged Accounts
- NIST SP 800-53 Rev. 5 AC-6(6) — Privileged Access By Non-Organizational Users
- NIST SP 800-53 Rev. 5 AC-6(7) — Review Of User Privileges
- NIST SP 800-53 Rev. 5 AC-6(8) — Privilege Levels For Code Execution
- NIST SP 800-53 Rev. 5 AC-6(9) — Log Use Of Privileged Functions
- NIST SP 800-53 Rev. 5 AC-6(10) — Prohibit Non-Privileged Users From Executing Privileged Functions
- NIST SP 800-53 Rev. 5 AC-7 — Unsuccessful Logon Attempts
- NIST SP 800-53 Rev. 5 AC-7(2) — Purge Or Wipe Mobile Device
- NIST SP 800-53 Rev. 5 AC-7(3) — Biometric Attempt Limiting
- NIST SP 800-53 Rev. 5 AC-7(4) — Use Of Alternate Authentication Factor
- NIST SP 800-53 Rev. 5 AC-8 — System Use Notification
- NIST SP 800-53 Rev. 5 AC-9 — Previous Logon Notification
- NIST SP 800-53 Rev. 5 AC-9(1) — Unsuccessful Logons
- NIST SP 800-53 Rev. 5 AC-9(2) — Successful And Unsuccessful Logons
- NIST SP 800-53 Rev. 5 AC-9(3) — Notification Of Account Changes
- NIST SP 800-53 Rev. 5 AC-9(4) — Additional Logon Information
- NIST SP 800-53 Rev. 5 AC-10 — Concurrent Session Control
- NIST SP 800-53 Rev. 5 AC-11 — Device Lock
- NIST SP 800-53 Rev. 5 AC-11(1) — Pattern-Hiding Displays
- NIST SP 800-53 Rev. 5 AC-12 — Session Termination
- NIST SP 800-53 Rev. 5 AC-12(1) — User-Initiated Logouts
- NIST SP 800-53 Rev. 5 AC-12(2) — Termination Message
- NIST SP 800-53 Rev. 5 AC-12(3) — Timeout Warning Message
- NIST SP 800-53 Rev. 5 AC-14 — Permitted Actions Without Identification Or Authentication
- NIST SP 800-53 Rev. 5 AC-16 — Security And Privacy Attributes
- NIST SP 800-53 Rev. 5 AC-16(1) — Dynamic Attribute Association
- NIST SP 800-53 Rev. 5 AC-16(2) — Attribute Value Changes By Authorized Individuals
- NIST SP 800-53 Rev. 5 AC-16(3) — Maintenance Of Attribute Associations By System
- NIST SP 800-53 Rev. 5 AC-16(4) — Association Of Attributes By Authorized Individuals
- NIST SP 800-53 Rev. 5 AC-16(5) — Attribute Displays On Objects To Be Output
- NIST SP 800-53 Rev. 5 AC-16(6) — Maintenance Of Attribute Association
- NIST SP 800-53 Rev. 5 AC-16(7) — Consistent Attribute Interpretation
- NIST SP 800-53 Rev. 5 AC-16(8) — Association Techniques And Technologies
- NIST SP 800-53 Rev. 5 AC-16(9) — Attribute Reassignment - Regrading Mechanisms
- NIST SP 800-53 Rev. 5 AC-16(10) — Attribute Configuration By Authorized Individuals
- NIST SP 800-53 Rev. 5 AC-17 — Remote Access
- NIST SP 800-53 Rev. 5 AC-17(1) — Monitoring And Control
- NIST SP 800-53 Rev. 5 AC-17(2) — Protection Of Confidentiality And Integrity Using Encryption
- NIST SP 800-53 Rev. 5 AC-17(3) — Managed Access Control Points
- NIST SP 800-53 Rev. 5 AC-17(4) — Privileged Commands And Access
- NIST SP 800-53 Rev. 5 AC-17(6) — Protection Of Mechanism Information
- NIST SP 800-53 Rev. 5 AC-17(9) — Disconnect Or Disable Access
- NIST SP 800-53 Rev. 5 AC-17(10) — Authenticate Remote Commands
- NIST SP 800-53 Rev. 5 AC-18 — Wireless Access
- NIST SP 800-53 Rev. 5 AC-18(1) — Authentication And Encryption
- NIST SP 800-53 Rev. 5 AC-18(3) — Disable Wireless Networking
- NIST SP 800-53 Rev. 5 AC-18(4) — Restrict Configurations By Users
- NIST SP 800-53 Rev. 5 AC-18(5) — Antennas And Transmission Power Levels
- NIST SP 800-53 Rev. 5 AC-19 — Access Control For Mobile Devices
- NIST SP 800-53 Rev. 5 AC-19(4) — Restrictions For Classified Information
- NIST SP 800-53 Rev. 5 AC-19(5) — Full Device Or Container-Based Encryption
- NIST SP 800-53 Rev. 5 AC-20 — Use Of External Systems
- NIST SP 800-53 Rev. 5 AC-20(1) — Limits On Authorized Use
- NIST SP 800-53 Rev. 5 AC-20(2) — Portable Storage Devices -- Restricted Use
- NIST SP 800-53 Rev. 5 AC-20(3) — Non-Organizationally Owned Systems -- Restricted Use
- NIST SP 800-53 Rev. 5 AC-20(4) — Network Accessible Storage Devices -- Prohibited Use
- NIST SP 800-53 Rev. 5 AC-20(5) — Portable Storage Devices -- Prohibited Use
- NIST SP 800-53 Rev. 5 AC-21 — Information Sharing
- NIST SP 800-53 Rev. 5 AC-21(1) — Automated Decision Support
- NIST SP 800-53 Rev. 5 AC-21(2) — Information Search And Retrieval
- NIST SP 800-53 Rev. 5 AC-22 — Publicly Accessible Content
- NIST SP 800-53 Rev. 5 AC-23 — Data Mining Protection
- NIST SP 800-53 Rev. 5 AC-24 — Access Control Decisions
- NIST SP 800-53 Rev. 5 AC-24(1) — Transmit Access Authorization Information
- NIST SP 800-53 Rev. 5 AC-24(2) — No User Or Process Identity
- NIST SP 800-53 Rev. 5 AC-25 — Reference Monitor