Control Family
AC — Access Control
25 controls · 122 enhancements
AC-1
Policy and Procedures
✓ LOW ✓ MODERATE ✓ HIGH AC-2
Account Management
✓ LOW ✓ MODERATE ✓ HIGH AC-3
Access Enforcement
✓ LOW ✓ MODERATE ✓ HIGH AC-4
Information Flow Enforcement
LOW ✓ MODERATE ✓ HIGH AC-5
Separation of Duties
LOW ✓ MODERATE ✓ HIGH AC-6
Least Privilege
LOW ✓ MODERATE ✓ HIGH AC-7
Unsuccessful Logon Attempts
✓ LOW ✓ MODERATE ✓ HIGH AC-8
System Use Notification
✓ LOW ✓ MODERATE ✓ HIGH AC-9
Previous Logon Notification
LOW MODERATE HIGH AC-10
Concurrent Session Control
LOW MODERATE ✓ HIGH AC-11
Device Lock
LOW ✓ MODERATE ✓ HIGH AC-12
Session Termination
LOW ✓ MODERATE ✓ HIGH AC-14
Permitted Actions Without Identification or Authentication
✓ LOW ✓ MODERATE ✓ HIGH AC-16
Security and Privacy Attributes
LOW MODERATE HIGH AC-17
Remote Access
✓ LOW ✓ MODERATE ✓ HIGH AC-18
Wireless Access
✓ LOW ✓ MODERATE ✓ HIGH AC-19
Access Control for Mobile Devices
✓ LOW ✓ MODERATE ✓ HIGH AC-20
Use of External Systems
✓ LOW ✓ MODERATE ✓ HIGH AC-21
Information Sharing
LOW ✓ MODERATE ✓ HIGH AC-22
Publicly Accessible Content
✓ LOW ✓ MODERATE ✓ HIGH AC-23
Data Mining Protection
LOW MODERATE HIGH AC-24
Access Control Decisions
LOW MODERATE HIGH AC-25