Navigate

AC-17(2)

AC-17(2): Protection of Confidentiality and Integrity Using Encryption

Implement cryptographic mechanisms to protect the confidentiality and integrity of remote access sessions.

Supplemental

Virtual private networks can be used to protect the confidentiality and integrity of remote access sessions. Transport Layer Security (TLS) is an example of a cryptographic protocol that provides end-to-end communications security over networks and is used for Internet communications and online transactions.

CIA Levels
Confidentiality	low
Integrity	low
Availability	unknown

Overlays
CMMC, DAF Baseline, Privacy (accountability), Privacy (high), Privacy (low), Privacy (moderate)

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to AC-17(2).

Control	Description
SC-8	Protect the [one or more of "confidentiality"/"integrity"] of transmitted information.
SC-12	Establish and manage cryptographic keys when cryptography is employed within the system in accordance with the following key management requirements: [requirements for key generation, distribution, storage, access, and destruction are defined;].
SC-13	a: Determine the [cryptographic uses are defined;] ; and b: Implement the following types of cryptography required for each specified cryptographic use: [types of cryptography for each specified cryptographic use are defined;].

Enhancements

The controls below (if any) add on to the requirements of AC-17(2).

Control	Description
No controls

Related CCIs

The CCIs below are tied to AC-17(2).

CCI	Definition
CCI-000068	Implement cryptographic mechanisms to protect the confidentiality of remote access sessions.
CCI-001453	Implement cryptographic mechanisms to protect the integrity of remote access sessions.