An error occurred:

© 2024 Xylok, LLC

Version: v2024.10.3-0fa4-8a67

Navigate

CCI-002255

CCI-002255 Definition

The organization defines the user actions that can be performed on the information system without identification and authentication.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Compelling Evidence

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002255.

Control

Description

The organization:

AC-14a.: Identifies [Assignment: organization-defined user actions] that can be performed on the information system without identification or authentication consistent with organizational missions/business functions; and

AC-14b.: Documents and provides supporting rationale in the security plan for the information system, user actions not requiring identification or authentication.