AC-22: Publicly Accessible Content
NIST Baseline: Low
DIR Required By: 01/20/2023
Review Date: 04/17/2024
Information resource owners that have access to public information resources shall:
- Designate individuals authorized to make information publicly accessible;
- Train authorized individuals to ensure that publicly accessible information does not contain nonpublic information;
- Review the proposed content of information prior to posting onto the publicly accessible information system to ensure that any non-public information is not included; and
- Review the content on the publicly accessible system for non-public information at a frequency based on the risk factors of the posted information and remove such information if discovered.
References/Additional Resources
None. See any applicable internal procedures.