Navigate

CCI-000084

CCI-000084 Definition

Authorize connection of mobile devices to organizational systems.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Determine if the connection of mobile devices to Organizational systems is authorized.

Validation Procedures

Examine: [SELECT FROM: Access control policy; procedures addressing access control for mobile device usage (including restrictions); configuration management plan; system design documentation; system configuration settings and associated documentation; authorizations for mobile device connections to organizational systems; system audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel using mobile devices to access organizational systems; system/network administrators; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Access control capability for mobile device connections to organizational systems; configurations of mobile devices].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000084.

Control	Description
AC-19	a: Establish configuration requirements, connection requirements, and implementation guidance for organization-controlled mobile devices, to include when such devices are outside of controlled areas; and b: Authorize the connection of mobile devices to organizational systems.