AC-22: Publicly Accessible Content

NIST Baseline:  Low 

DIR Required By: 01/20/2023 

Review Date:  04/17/2024

Information resource owners that have access to public information resources shall: 

  • Designate individuals authorized to make information publicly accessible; 
  • Train authorized individuals to ensure that publicly accessible information does not contain nonpublic information; 
  • Review the proposed content of information prior to posting onto the publicly accessible information system to ensure that any non-public information is not included; and 
  • Review the content on the publicly accessible system for non-public information at a frequency based on the risk factors of the posted information and remove such information if discovered. 

References/Additional Resources

None.  See any applicable internal procedures.