AC-17(3): Managed Access Control Points
Control Family:
Parent Control:
CSF v2.0 References:
Threats Addressed:
Baselines:
- Moderate
- High
- OT Moderate (SP 800-82r3)
- OT High (SP 800-82r3)
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- AC-17(3): Managed Access Control Points
Control Statement
Route remote accesses through authorized and managed network access control points.
Supplemental Guidance
Organizations consider the Trusted Internet Connections (TIC) initiative DHS TIC requirements for external network connections since limiting the number of access control points for remote access reduces attack surfaces.
OT Discussion
Example compensating controls include connectionspecific manual authentication of the remote entity.