Access Control (AC) templates
Templates for the Access Control (AC) family of controls in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 Revision 5, with the family policy and procedure first.
- Access Control PolicyPOL-AC
In this policy, the CISO sets the Organization's requirements for access control in every information system that the Organization operates or that others operate for it. The CISO issues the policy under these authorities:
- Access Control ProcedurePROC-AC
The people named in this procedure use it to carry out the AC control family policy (POL-AC). It covers every control in the access control family. The steps, the people responsible, and the evidence below show how the Organization meets those National Institute of Standards and Technology (NIST) SP 800-53 Rev.
- Mobile Device PolicyPOL-MOB-001
- Mobile Device ProcedurePROC-MOB-001
Use this procedure to issue, enroll, update, and recover mobile devices, approve apps, prepare devices for international travel, keep messages as records, and review the program each year. It covers smartphones and tablets, government-furnished or personally owned. Its travel steps also cover laptops.
- Zero Trust and ICAM Implementation PlanPLAN-ZT-001
The Organization follows this plan to: