ComplianceNIST 800-53 enhancement

NIST-AC-17(10) Authenticate Remote Commands

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
AC Access Control
Control
AC-17(10)

Control statement

Implement [Assignment: mechanisms] to authenticate [Assignment: remote commands].

Discussion

Authenticating remote commands protects against unauthorized commands and the replay of authorized commands. The ability to authenticate remote commands is important for remote systems for which loss, malfunction, misdirection, or exploitation would have immediate or serious consequences, such as injury, death, property damage, loss of high value assets, failure of mission or business functions, or compromise of classified or controlled unclassified information. Authentication mechanisms for remote commands ensure that systems accept and execute commands in the order intended, execute only authorized commands, and reject unauthorized commands. Cryptographic mechanisms can be used, for example, to authenticate remote commands.

Related

Enhancement of · Compliance (1)

Related control · Compliance (3)

  • NIST-SC-12 Cryptographic Key Establishment and Management NIST 800-53 control
  • NIST-SC-13 Cryptographic Protection NIST 800-53 control
  • NIST-SC-23 Session Authenticity NIST 800-53 control