Navigate

AC-18(1)

AC-18(1): Authentication and Encryption

Protect wireless access to the system using authentication of [one or more of "users"/"devices"] and encryption.

Supplemental

Wireless networking capabilities represent a significant potential vulnerability that can be exploited by adversaries. To protect systems with wireless access points, strong authentication of users and devices along with strong encryption can reduce susceptibility to threats by adversaries involving wireless technologies.

CIA Levels
Confidentiality	low
Integrity	low
Availability	unknown

Overlays
CMMC, Privacy (accountability), Privacy (high), Privacy (low), Privacy (moderate)

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to AC-18(1).

Control	Description
SC-8	Protect the [one or more of "confidentiality"/"integrity"] of transmitted information.
SC-12	Establish and manage cryptographic keys when cryptography is employed within the system in accordance with the following key management requirements: [requirements for key generation, distribution, storage, access, and destruction are defined;].
SC-13	a: Determine the [cryptographic uses are defined;] ; and b: Implement the following types of cryptography required for each specified cryptographic use: [types of cryptography for each specified cryptographic use are defined;].

Enhancements

The controls below (if any) add on to the requirements of AC-18(1).

Control	Description
No controls

Related CCIs

The CCIs below are tied to AC-18(1).

CCI	Definition
CCI-001443	Protect wireless access to the system using authentication of users and/or devices.
CCI-001444	Protect wireless access to the system using encryption.