💼 AC-20 (1) LIMITS ON AUTHORIZED USE

• Contextual name: 💼 AC-20 (1) LIMITS ON AUTHORIZED USE
• ID: /frameworks/nist-sp-800-53-r4/ac/20/01
• Located in: 💼 AC-20 USE OF EXTERNAL INFORMATION SYSTEMS

Description

The organization permits authorized individuals to use an external information system to access the information system or to process, store, or transmit organization-controlled information only when the organization: AC-20 (1)(a) Verifies the implementation of required security controls on the external system as specified in the organization???s information security policy and security plan; or AC-20 (1)(b) Retains approved information system connection or processing agreements with the organizational entity hosting the external information system.

Similar

• Internal
  • ID: dec-c-76354aab

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags