AC-3: Access Enforcement
NIST Baseline: Low
DIR Required By: 01/20/2023
Review Date: 04/17/2024
- The management of access to information resources is the responsibility of the custodian of the resource/system.
- Users of any information resources will be assigned a unique identifier.
- Before accessing an information resource or system, the user will need to authenticate.
- Please see Control AC-14, Permitted Actions without Identification or Authentication, regarding any permitted actions without identification or authentication.
References/Additional Resources
None. See any applicable internal procedures.