AC-17(9): Disconnect / Disable Access

Control Family:

Access Control

Parent Control:

AC-17: Remote Access

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.AC-3
PR.PT-4

Threats Addressed:

Lateral Movement

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
AC-17(9): Disconnect or Disable Access

Control Statement

The organization provides the capability to expeditiously disconnect or disable remote access to the information system within [Assignment: organization-defined time period].

Supplemental Guidance

This control enhancement requires organizations to have the capability to rapidly disconnect current users remotely accessing the information system and/or disable further remote access. The speed of disconnect or disablement varies based on the criticality of missions/business functions and the need to eliminate immediate or future remote access to organizational information systems.