AC-17(2)

AC-17(2): Protection of Confidentiality / Integrity Using Encryption

The information system implements cryptographic mechanisms to protect the confidentiality and integrity of remote access sessions.

The encryption strength of mechanism is selected based on the security categorization of the information.

Overlays
None

CSF Categories
None

The controls below (if any) were marked by NIST as being related to AC-17(2).

Control	Description
SC-8	The information system protects the [one or more of confidentiality/integrity] of transmitted information.
SC-12	The organization establishes and manages cryptographic keys for required cryptography employed within the information system in accordance with [organization-defined requirements for key generation, distribution, storage, access, and destruction].
SC-13	The information system implements [organization-defined cryptographic uses and type of cryptography required for each use] in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.

The controls below (if any) add on to the requirements of AC-17(2).

Control	Description
No controls

The CCIs below are tied to AC-17(2).

CCI	Definition
CCI-000068	Implement cryptographic mechanisms to protect the confidentiality of remote access sessions.
CCI-001453	Implement cryptographic mechanisms to protect the integrity of remote access sessions.