🔐 AC — Access Control
Limit system access to authorized users, processes, and devices
← Back to all domains2 Practices
Showing Level 1 Foundational only (15 requirements)
L1 AC.L1-3.1.1
Limit system access to authorized users, processes acting on behalf of authorized users, and devices
This control means ensuring only the right people, automated processes, and devices can access your systems. Think of it like a bouncer at a club—only...
Level 1 — Foundational
View Control →
L1 AC.L1-3.1.2
Limit system access to the types of transactions and functions that authorized users are permitted to execute
This control ensures that users can only perform actions and access functions within a system that they are explicitly authorized to use. Think of it ...
Level 1 — Foundational
View Control →