AC — Access Control

AC-1Policy and ProceduresLowModerateHighPrivacy AC-2Account ManagementLowModerateHigh AC-3Access EnforcementLowModerateHigh AC-4Information Flow EnforcementModerateHigh AC-5Separation of DutiesModerateHigh AC-6Least PrivilegeModerateHigh AC-7Unsuccessful Logon AttemptsLowModerateHigh AC-8System Use NotificationLowModerateHigh AC-9Previous Logon NotificationNot in a baseline AC-10Concurrent Session ControlHigh AC-11Device LockModerateHigh AC-12Session TerminationModerateHigh AC-13Supervision and Review — Access ControlWithdrawn AC-14Permitted Actions Without Identification or AuthenticationLowModerateHigh AC-15Automated MarkingWithdrawn AC-16Security and Privacy AttributesNot in a baseline AC-17Remote AccessLowModerateHigh AC-18Wireless AccessLowModerateHigh AC-19Access Control for Mobile DevicesLowModerateHigh AC-20Use of External SystemsLowModerateHigh AC-21Information SharingModerateHigh AC-22Publicly Accessible ContentLowModerateHigh AC-23Data Mining ProtectionNot in a baseline AC-24Access Control DecisionsNot in a baseline AC-25Reference MonitorNot in a baseline