FBI CJIS Security Policy
AC: Access Control – FBI CJIS Security Policy

FBI CJIS Security Policy AC-20(1): Use of External Systems | Limits on Authorized Use

What does AC-20(1) require?

Permit authorized individuals to use an external system to reach the agency system or to handle organization-controlled information only after the controls on the external system have been verified against the agency's security and privacy policies and plans, or approved connection or processing agreements with the hosting entity are retained.

Maintained by Gerard BlokdykControl text last updated

Other controls in AC: Access Control – FBI CJIS Security Policy

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.