ComplianceNIST 800-53 enhancement

NIST-AC-6(3) Network Access to Privileged Commands

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
AC Access Control
Control
AC-6(3)

Control statement

Authorize network access to [Assignment: privileged commands] only for [Assignment: compelling operational needs] and document the rationale for such access in the security plan for the system.

Discussion

Network access is any access across a network connection in lieu of local access (i.e., user being physically present at the device).

Related

Enhancement of · Compliance (1)

  • NIST-AC-6 Least Privilege NIST 800-53 control

Related control · Compliance (3)

  • NIST-AC-17 Remote Access NIST 800-53 control
  • NIST-AC-18 Wireless Access NIST 800-53 control
  • NIST-AC-19 Access Control for Mobile Devices NIST 800-53 control