Navigate

AC-18(4)

AC-18(4): Restrict Configurations by Users

The organization identifies and explicitly authorizes users allowed to independently configure wireless networking capabilities.

Supplemental

Organizational authorizations to allow selected users to configure wireless networking capability are enforced in part, by the access enforcement mechanisms employed within organizational information systems.

CIA Levels
Confidentiality	high
Integrity	high
Availability	unknown

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to AC-18(4).

Control	Description
AC-3	The information system enforces approved authorizations for logical access to information and system resources in accordance with applicable access control policies.
SC-15	The information system: a: Prohibits remote activation of collaborative computing devices with the following exceptions: [organization-defined exceptions where remote activation is to be allowed]; and b: Provides an explicit indication of use to users physically present at the devices.

Enhancements

The controls below (if any) add on to the requirements of AC-18(4).

Control	Description
No controls

Related CCIs

The CCIs below are tied to AC-18(4).

CCI	Definition
CCI-002324	Identify and explicitly authorize users allowed to independently configure wireless networking capabilities.