Reporting Requirements
Per NIST SP 800-53, “Remote access is access to organizational systems (or processes acting on behalf of users) that communicate through external networks such as the Internet. Types of remote access include dial-up, broadband, and wireless.”
Specifically, Per AC-17 of NIST SP 800-53, organizations are to “...Establish and document usage restrictions, configuration/connection requirements, and implementation guidance for each type of remote access allowed; and Authorize each type of remote access to the system prior to allowing such connections..” The keyword here is “document”, which means you need a policy and procedure for AC-17
Specifically, Per AC-17 of NIST SP 800-53, organizations are to “...Establish and document usage restrictions, configuration/connection requirements, and implementation guidance for each type of remote access allowed; and Authorize each type of remote access to the system prior to allowing such connections..” The keyword here is “document”, which means you need a policy and procedure for AC-17
How to Get Started
Start by downloading our world-class remote access policy and procedures template, along with additional NIST RMF information security and privacy policies and procedures at the Arlington Security Portal (ASP).
