AC-18 Wireless Access
Access Control
Description
a. Establish configuration requirements, connection requirements, and implementation guidance for each type of wireless access; and b. Authorize each type of wireless access to the system prior to allowing such connections.
Supplemental Guidance
Wireless technologies include microwave, packet radio (ultra-high frequency or very high frequency), 802.11x, and Bluetooth. Wireless networks use authentication protocols that provide authenticator protection and mutual authentication.
Changes from Rev 4
Control text drops 'usage restrictions' Adds 'for each type of' wireless access
Enhancements (4)
What NIST adds to this control. Select one to read its statement.
AC-18(01) Authentication and Encryption ModerateHigh
Protect wireless access to the system using authentication of [Selection (one or more): users; devices] and encryption.
AC-18(03) Disable Wireless Networking ModerateHigh
Disable, when not intended for use, wireless networking capabilities embedded within system components prior to issuance and deployment.
AC-18(04) Restrict Configurations by Users High
Identify and explicitly authorize users allowed to independently configure wireless networking capabilities.
AC-18(05) Antennas and Transmission Power Levels High
Select radio antennas and calibrate transmission power levels to reduce the probability that signals from wireless access points can be received outside of organization-controlled boundaries.
Withdrawn by NIST:
- AC-18(02) Monitoring Unauthorized Connections, now in SI-04
Patterns that use this control (4)
Grouped by the emphasis each pattern gives it.
Critical (1)
Important (1)
MITRE ATT&CK Techniques (25)
ATT&CK v16.1Techniques mitigated by this control, mapped via CTID.