AC-17(9): Disconnect or Disable Access
Control Family:
Parent Control:
CSF v2.0 References:
Threats Addressed:
Baselines:
- OT Low (SP 800-82r3)
- OT Moderate (SP 800-82r3)
- OT High (SP 800-82r3)
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- AC-17(9): Disconnect / Disable Access
Control Statement
Provide the capability to disconnect or disable remote access to the system within [Assignment: organization-defined time period].
Supplemental Guidance
The speed of system disconnect or disablement varies based on the criticality of missions or business functions and the need to eliminate immediate or future remote access to systems.
OT Discussion
Implementation of the remote access disconnect should not impact OT operations. OT personnel should be trained on how to use the remote access disconnect.
OT Baseline Rationale
Rationale for adding to Low, Mod, High baselines: As more OT systems become accessible remotely, the capability to disconnect or disable remote access is critical to managing risk and may be required to provide stable and safe operations.