3.1 — Access Control
92 requirements in the Access Control family
3.1.1Limit System Access Assessment
3.1.1[a]Limit System Access Assessment [a]
3.1.1[b]Limit System Access Assessment [b]
3.1.1[c]Limit System Access Assessment [c]
3.1.1[d]Limit System Access Assessment [d]
3.1.1[e]Limit System Access Assessment [e]
3.1.1[f]Limit System Access Assessment [f]
3.1.2Limit Transaction and Function Access Assessment
3.1.2[a]Limit Transaction and Function Access Assessment [a]
3.1.2[b]Limit Transaction and Function Access Assessment [b]
3.1.3Control CUI Flow Assessment
3.1.3[a]Control CUI Flow Assessment [a]
3.1.3[b]Control CUI Flow Assessment [b]
3.1.3[c]Control CUI Flow Assessment [c]
3.1.3[d]Control CUI Flow Assessment [d]
3.1.3[e]Control CUI Flow Assessment [e]
3.1.4Separation of Duties Assessment
3.1.4[a]Separation of Duties Assessment [a]
3.1.4[b]Separation of Duties Assessment [b]
3.1.4[c]Separation of Duties Assessment [c]
3.1.5Least Privilege Assessment
3.1.5[a]Least Privilege Assessment [a]
3.1.5[b]Least Privilege Assessment [b]
3.1.5[c]Least Privilege Assessment [c]
3.1.5[d]Least Privilege Assessment [d]
3.1.6Use Non-Privileged Accounts Assessment
3.1.6[a]Use Non-Privileged Accounts Assessment [a]
3.1.6[b]Use Non-Privileged Accounts Assessment [b]
3.1.7Prevent Non-Privileged Users from Executing Privileged Functions Assessment
3.1.7[a]Prevent Non-Privileged Users from Executing Privileged Functions Assessment [a]
3.1.7[b]Prevent Non-Privileged Users from Executing Privileged Functions Assessment [b]
3.1.7[c]Prevent Non-Privileged Users from Executing Privileged Functions Assessment [c]
3.1.7[d]Prevent Non-Privileged Users from Executing Privileged Functions Assessment [d]
3.1.8Limit Unsuccessful Logon Attempts Assessment
3.1.8[a]Limit Unsuccessful Logon Attempts Assessment [a]
3.1.8[b]Limit Unsuccessful Logon Attempts Assessment [b]
3.1.9Privacy and Security Notices Assessment
3.1.9[a]Privacy and Security Notices Assessment [a]
3.1.9[b]Privacy and Security Notices Assessment [b]
3.1.10Session Lock Assessment
3.1.10[a]Session Lock Assessment [a]
3.1.10[b]Session Lock Assessment [b]
3.1.10[c]Session Lock Assessment [c]
3.1.11Session Termination Assessment
3.1.11[a]Session Termination Assessment [a]
3.1.11[b]Session Termination Assessment [b]
3.1.12Control Remote Access Assessment
3.1.12[a]Control Remote Access Assessment [a]
3.1.12[b]Control Remote Access Assessment [b]
3.1.12[c]Control Remote Access Assessment [c]
3.1.12[d]Control Remote Access Assessment [d]
3.1.13Route Remote Access via Managed Access Control Points Assessment
3.1.13[a]Route Remote Access via Managed Access Control Points Assessment [a]
3.1.13[b]Route Remote Access via Managed Access Control Points Assessment [b]
3.1.14Limit Remote Access via Managed Access Control Points Assessment
3.1.14[a]Limit Remote Access via Managed Access Control Points Assessment [a]
3.1.14[b]Limit Remote Access via Managed Access Control Points Assessment [b]
3.1.15Authorize Remote Execution Assessment
3.1.15[a]Authorize Remote Execution Assessment [a]
3.1.15[b]Authorize Remote Execution Assessment [b]
3.1.15[c]Authorize Remote Execution Assessment [c]
3.1.15[d]Authorize Remote Execution Assessment [d]
3.1.16Authorize Wireless Access Assessment
3.1.16[a]Authorize Wireless Access Assessment [a]
3.1.16[b]Authorize Wireless Access Assessment [b]
3.1.17Protect Wireless Access Assessment
3.1.17[a]Protect Wireless Access Assessment [a]
3.1.17[b]Protect Wireless Access Assessment [b]
3.1.18Control Connection of Mobile Devices Assessment
3.1.18[a]Control Connection of Mobile Devices Assessment [a]
3.1.18[b]Control Connection of Mobile Devices Assessment [b]
3.1.18[c]Control Connection of Mobile Devices Assessment [c]
3.1.19Encrypt CUI on Mobile Devices Assessment
3.1.19[a]Encrypt CUI on Mobile Devices Assessment [a]
3.1.19[b]Encrypt CUI on Mobile Devices Assessment [b]
3.1.20Verify External Connections Assessment
3.1.20[a]Verify External Connections Assessment [a]
3.1.20[b]Verify External Connections Assessment [b]
3.1.20[c]Verify External Connections Assessment [c]
3.1.20[d]Verify External Connections Assessment [d]
3.1.20[e]Verify External Connections Assessment [e]
3.1.20[f]Verify External Connections Assessment [f]
3.1.21Limit Use of Portable Storage Devices Assessment
3.1.21[a]Limit Use of Portable Storage Devices Assessment [a]
3.1.21[b]Limit Use of Portable Storage Devices Assessment [b]
3.1.21[c]Limit Use of Portable Storage Devices Assessment [c]
3.1.22Control Publicly Accessible Content Assessment
3.1.22[a]Control Publicly Accessible Content Assessment [a]
3.1.22[b]Control Publicly Accessible Content Assessment [b]
3.1.22[c]Control Publicly Accessible Content Assessment [c]
3.1.22[d]Control Publicly Accessible Content Assessment [d]
3.1.22[e]Control Publicly Accessible Content Assessment [e]