FBI CJIS Security Policy
AC: Access Control – FBI CJIS Security Policy

FBI CJIS Security Policy AC-20: Use of External Systems

What does AC-20 require?

Establish agency-level policies for the use of external systems consistent with the trust relationships with the organizations that own or operate them, allowing authorized individuals to access the system from external systems or to handle organization-controlled information on them, or prohibit the use of personally owned systems including BYOD mobile devices and publicly accessible systems for accessing, processing, storing or transmitting CJI.

Maintained by Gerard BlokdykControl text last updated

Other controls in AC: Access Control – FBI CJIS Security Policy

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.