Navigate

AC-6(3)

AC-6(3): Network Access to Privileged Commands

The organization authorizes network access to [organization-defined privileged commands] only for [organization-defined compelling operational needs] and documents the rationale for such access in the security plan for the information system.

Supplemental

Network access is any access across a network connection in lieu of local access (i.e., user being physically present at the device).

CIA Levels
Confidentiality	high
Integrity	high
Availability	unknown

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to AC-6(3).

Control	Description
AC-17	The organization: a: Establishes and documents usage restrictions, configuration/connection requirements, and implementation guidance for each type of remote access allowed; and b: Authorizes remote access to the information system prior to allowing such connections.

Enhancements

The controls below (if any) add on to the requirements of AC-6(3).

Control	Description
No controls

Related CCIs

The CCIs below are tied to AC-6(3).

CCI	Definition
CCI-000041	Authorize network access to organization-defined privileged commands only for organization-defined compelling operational needs.
CCI-000042	Document the rationale for authorized network access to organization-defined privileged commands in the security plan for the system.
CCI-001420	Defines the privileged commands to which network access is to be authorized only for organization-defined compelling operational needs.
CCI-002224	Defines the compelling operational needs that must be met in order to be authorized network access to organization-defined privileged commands.