ComplianceNIST 800-53 enhancement
NIST-AC-17(10) Authenticate Remote Commands
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- AC Access Control
- Control
- AC-17(10)
Control statement
Implement [Assignment: mechanisms] to authenticate [Assignment: remote commands].
Discussion
Authenticating remote commands protects against unauthorized commands and the replay of authorized commands. The ability to authenticate remote commands is important for remote systems for which loss, malfunction, misdirection, or exploitation would have immediate or serious consequences, such as injury, death, property damage, loss of high value assets, failure of mission or business functions, or compromise of classified or controlled unclassified information. Authentication mechanisms for remote commands ensure that systems accept and execute commands in the order intended, execute only authorized commands, and reject unauthorized commands. Cryptographic mechanisms can be used, for example, to authenticate remote commands.
Related
Enhancement of · Compliance (1)
- NIST-AC-17 Remote Access NIST 800-53 control
Related control · Compliance (3)
- NIST-SC-12 Cryptographic Key Establishment and Management NIST 800-53 control
- NIST-SC-13 Cryptographic Protection NIST 800-53 control
- NIST-SC-23 Session Authenticity NIST 800-53 control