Access Control (AC)
19 controls
- AC-1 Access Control Policy and Procedures
- AC-2 Account Management
- AC-2(3) Account Management | Disable Accounts
- AC-2(7) Privileged User Accounts
- AC-3 Access Enforcement
- AC-5 Separation of Duties
- AC-6 Least Privilege
- AC-7 Unsuccessful Login Attempts
- AC-8 System Use Notification
- AC-11 Device Lock
- AC-14 Permitted Actions Without Identification or Authentication
- AC-17 Remote Access
- AC-18 Wireless Access
- AC-19 Access Control for Mobile Devices
- AC-20 Use of External Information Systems
- AC-22 Publicly Accessible Content
- AC-100 Email Sending Limitations
Revision History
Last Updated: February 21, 2025
Previous Versions:
- June 29, 2023
- May 31, 2022
- March 25, 2021
- September 16, 2019