AC-14—Permitted Actions Without Identification or Authentication

Identify ⚙organization-defined user actions that can be performed on the system without identification or authentication consistent with organizational mission and business functions; and

Document and provide supporting rationale in the security plan for the system, user actions not requiring identification or authentication.