CCI-002324

The organization identifies and explicitly authorizes users allowed to independently configure wireless networking capabilities.

Implementation Guidance

The organization being inspected/assessed identifies and explicitly authorizes users allowed to independently configure wireless networking capabilities. The organization must maintain an audit trail of authorizations.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trail of authorizations to ensure the organization being inspected/assessed identifies and explicitly authorizes users allowed to independently configure wireless networking capabilities.

Compelling Evidence

1.) Signed and dated access control policy and/or account maintenance policy. 2.) Audit trail of authorizations that shows that the site identifies and explicitly authorizes users (names and titles) allowed to independently configure wireless networking capabilities.

The controls below (if any) were marked by NIST as being related to CCI-002324.