CCI-002312

Implementation Guidance

The organization being inspected/assessed establishes and documents implementation guidance for each type of remote access allowed.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented implementation guidance to ensure the organization being inspected/assessed establishes and documents implementation guidance for each type of remote access allowed.

Compelling Evidence

1.) Signed and dated Access Control Policy 2.) Most current Network topology diagram 3.) Signed and dated Standard user agreements. 4.) Signed and dated Privileged user agreement. 5.) Documentation that establishes and documents implementation guidance for each type of remote access allowed.