Detections
Analytics
800-53|AC-20(1)
Title
LIMITS ON AUTHORIZED USEDescription
The organization permits authorized individuals to use an external information system to access the information system or to process, store, or transmit organization-controlled information only when the organization:Supplemental
This control enhancement recognizes that there are circumstances where individuals using external information systems (e.g., contractors, coalition partners) need to access organizational information systems. In those situations, organizations need confidence that the external information systems contain the necessary security safeguards (i.e., security controls), so as not to compromise, damage, or otherwise harm organizational information systems. Verification that the required security controls have been implemented can be achieved, for example, by third-party, independent assessments, attestations, or other means, depending on the confidence level required by organizations.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: CA-2
Category: ACCESS CONTROL
Parent Title: USE OF EXTERNAL INFORMATION SYSTEMS
Family: ACCESS CONTROL
Baseline Impact: MODERATE,HIGH
Audit Items
View all Reference Audit Items