AC-20—Use of External Systems
>Control Description
a
[Selection (one or more): Establish ⚙organization-defined terms and conditions; Identify ⚙organization-defined controls asserted to be implemented on external systems], consistent with the trust relationships established with other organizations owning, operating, and/or maintaining external systems, allowing authorized individuals to:
1.
Access the system from external systems; and
2.
Process, store, or transmit organization-controlled information using external systems; or
b
Prohibit the use of ⚙organizationally-defined types of external systems.
>Related Controls
Ask AI
Configure your API key to use AI features.