CCI-002311

The organization establishes and documents configuration/connection requirements for each type of remote access allowed.

Implementation Guidance

The organization being inspected/assessed establishes and documents configuration/connection requirements for each type of remote access allowed.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented requirements to ensure the organization being inspected/assessed establishes and documents configuration/connection requirements for each type of remote access allowed.

Compelling Evidence

1.) Signed and dated Access Control Policy 2.) Signed and dated Access Control Lists (ACL's) on the remote device(s). 3.) Most current Network topology diagram 4.) Documentation that establishes and documents configuration/connection requirements for each type of remote access allowed.

The controls below (if any) were marked by NIST as being related to CCI-002311.