AC-17(9): Disconnect or Disable Access

Control Family:

Access Control

Parent Control:

AC-17: Remote Access

CSF v1.1 References:

CSF v2.0 References:

PF v1.0 References:

Threats Addressed:

Baselines:

  • OT Low (SP 800-82r3)
  • OT Moderate (SP 800-82r3)
  • OT High (SP 800-82r3)

Previous Version:

Control Statement

Provide the capability to disconnect or disable remote access to the system within [Assignment: organization-defined time period].

Supplemental Guidance

The speed of system disconnect or disablement varies based on the criticality of missions or business functions and the need to eliminate immediate or future remote access to systems.

OT Discussion

Implementation of the remote access disconnect should not impact OT operations. OT personnel should be trained on how to use the remote access disconnect.

OT Baseline Rationale

Rationale for adding to Low, Mod, High baselines: As more OT systems become accessible remotely, the capability to disconnect or disable remote access is critical to managing risk and may be required to provide stable and safe operations.