STIGViewer Trial workspace — loading your subscription…
OpenControls Logo

STIG ViewerTrial

NIST 800-53 Rev 5

424 controls available

My Controls0NIST 800-53 Catalog424Collections0
AC-17(4)moderatehigh

Privileged Commands and Access

Access Control

Control Statement

Authorize the execution of privileged commands and access to security-relevant information via remote access only in a format that provides assessable evidence and for the following needs: {{ insert: param, ac-17.4_prm_1 }} ; and Document the rationale for remote access in the security plan for the system.

Discussion

Remote access to systems represents a significant potential vulnerability that can be exploited by adversaries. As such, restricting the execution of privileged commands and access to security-relevant information via remote access reduces the exposure of the organization and the susceptibility to threats by adversaries to the remote access capability.

Framework
NIST SP 800-53 Rev 5
Family
Access Control
Baselines
moderate, high

Related Frameworks

7 paths across 2 frameworks
NIST 800-1711 mapping
3.1.15
1.00
  • NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI6 mappings
CCI-000070
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-002316
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-002317
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-002318
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-002319
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-002320
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent

Related STIGs

156 STIGs reach this control through 25 CCIs. Expand a row to see the responsible NICE and O*NET roles.

Operating System — Desktop

5 STIGs
Microsoft Windows 10 Security Technical Implementation Guide
32025-02-255 of 261 findings match
Apple macOS 14 (Sonoma) Security Technical Implementation Guide
22024-12-043 of 155 findings match
Apple macOS 15 (Sequoia) Security Technical Implementation Guide
V1R72026-02-063 of 160 findings match
Apple macOS 26 (Tahoe) Security Technical Implementation Guide
V1R22026-02-113 of 160 findings match
Microsoft Windows 11 Security Technical Implementation Guide
V2R72026-02-123 of 262 findings match

Operating System — Server

26 STIGs
Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide
V1R62026-02-2714 of 439 findings match
Red Hat Enterprise Linux 8 Security Technical Implementation Guide
V2R72026-02-0511 of 366 findings match
Oracle Linux 8 Security Technical Implementation Guide
V2R82026-02-1310 of 375 findings match
Red Hat Enterprise Linux 9 Security Technical Implementation Guide
V2R82026-02-059 of 446 findings match
Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide
V1R52026-02-068 of 194 findings match
Oracle Linux 9 Security Technical Implementation Guide
V1R52026-02-178 of 448 findings match
Tri-Lab Operating System Stack (TOSS) 4 Security Technical Implementation Guide
V2R52026-02-198 of 226 findings match
Amazon Linux 2023 Security Technical Implementation Guide
V1R32026-02-277 of 187 findings match
Show 18 more STIGs in this category →
Oracle Linux 7 Security Technical Implementation Guide
32025-05-087 of 243 findings match
Red Hat Enterprise Linux 10 Security Technical Implementation Guide
V1R12026-03-117 of 434 findings match
Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide
22025-05-166 of 172 findings match
Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide
V2R82026-02-066 of 188 findings match
IBM AIX 7.x Security Technical Implementation Guide
V3R22026-02-066 of 283 findings match
Microsoft Windows Server 2019 Security Technical Implementation Guide
32025-05-236 of 275 findings match
Microsoft Windows Server 2019 Security Technical Implementation Guide
V3R82026-02-126 of 282 findings match
Microsoft Windows Server 2022 Security Technical Implementation Guide
V2R82026-02-136 of 282 findings match
Microsoft Windows Server 2025 Security Technical Implementation Guide
V1R12026-02-206 of 284 findings match
General Purpose Operating System Security Requirements Guide
V3R32025-09-225 of 203 findings match
SUSE Linux Enterprise Server 15 Security Technical Implementation Guide
V2R72026-02-194 of 214 findings match
Anduril NixOS Security Technical Implementation Guide
V1R22025-08-193 of 103 findings match
HPE 3PAR StoreServ 3.3.x Security Technical Implementation Guide
V2R12024-08-273 of 30 findings match
SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide
V1R42026-02-103 of 208 findings match
Solaris 11 SPARC Security Technical Implementation Guide
V3R52026-02-192 of 217 findings match
Solaris 11 X86 Security Technical Implementation Guide
V3R52026-02-192 of 216 findings match
SUSE Linux Enterprise Server 12 Security Technical Implementation Guide
32025-05-142 of 211 findings match
HPE 3PAR StoreServ 3.2.x Security Technical Implementation Guide
V2R12021-11-231 of 19 findings match

Operating System — Mainframe

10 STIGs
IBM z/OS ACF2 Security Technical Implementation Guide
V9R82026-03-099 of 225 findings match
IBM z/OS RACF Security Technical Implementation Guide
V9R82026-03-099 of 222 findings match
IBM z/OS TSS Security Technical Implementation Guide
V9R82026-03-099 of 230 findings match
IBM zVM Using CA VM:Secure Security Technical Implementation Guide
V2R22022-08-312 of 77 findings match
IBM Hardware Management Console (HMC) Security Technical Implementation Guide
V2R12024-06-241 of 35 findings match
zOS WebSphere Application Server for ACF2 Security Technical Implementation Guide
V7R22025-09-261 of 5 findings match
zOS Websphere Application Server for RACF Security Technical Implementation Guide
V7R22025-09-271 of 5 findings match
zOS WebSphere MQ for ACF2 Security Technical Implementation Guide
V7R22025-09-271 of 17 findings match
Show 2 more STIGs in this category →
zOS WebSphere MQ for RACF Security Technical Implementation Guide
V7R32025-09-271 of 17 findings match
zOS WebSphere MQ for TSS Security Technical Implementation Guide
V7R22025-09-281 of 17 findings match

Operating System — Mobile

5 STIGs
Apple iOS/iPadOS 18 Security Technical Implementation Guide
V2R22025-12-013 of 92 findings match
Apple iOS/iPadOS 26 Security Technical Implementation Guide
V1R22025-12-013 of 92 findings match
Apple visionOS 2 Security Technical Implementation Guide
V1R12025-09-302 of 50 findings match
Apple visionOS 26 Security Technical Implementation Guide
V1R12026-03-102 of 51 findings match
Samsung Android 15 MDFPP 3.3 BYOAD Security Technical Implementation Guide
12025-04-291 of 26 findings match

Network Device

37 STIGs
Virtual Private Network (VPN) Security Requirements Guide
V3R42025-09-1011 of 92 findings match
Application Layer Gateway Security Requirements Guide
V2R32025-09-157 of 160 findings match
Cisco ASA VPN Security Technical Implementation Guide
V2R22024-08-226 of 41 findings match
Palo Alto Networks ALG Security Technical Implementation Guide
V3R42025-03-126 of 50 findings match
Riverbed NetIM OS Security Technical Implementation Guide
V1R12025-10-026 of 154 findings match
Juniper SRX Services Gateway VPN Security Technical Implementation Guide
V3R22024-12-205 of 28 findings match
Symantec ProxySG ALG Security Technical Implementation Guide
V1R32020-03-275 of 66 findings match
IBM DataPower ALG Security Technical Implementation Guide
V1R12016-01-214 of 65 findings match
Show 29 more STIGs in this category →
F5 BIG-IP TMOS VPN Security Technical Implementation Guide
V1R12024-09-093 of 12 findings match
SDN Controller Security Requirements Guide
22024-05-283 of 34 findings match
Symantec Edge SWG ALG Security Technical Implementation Guide
V1R12025-12-163 of 15 findings match
Enterprise Voice, Video, and Messaging Session Management Security Requirements Guide
V1R22025-12-302 of 60 findings match
F5 BIG-IP TMOS ALG Security Technical Implementation Guide
V1R22025-06-092 of 37 findings match
HPE Aruba Networking AOS VPN Security Technical Implementation Guide
V1R12024-10-292 of 21 findings match
Network WLAN AP-IG Platform Security Technical Implementation Guide
V7R32023-02-132 of 9 findings match
Akamai KSD Service Impact Level 2 ALG Security Technical Implementation Guide
V1R12017-09-151 of 33 findings match
Cisco ASA Firewall Security Technical Implementation Guide
V2R12024-06-061 of 21 findings match
Cisco IOS Router NDM Security Technical Implementation Guide
V3R72026-02-251 of 43 findings match
Cisco IOS Switch NDM Security Technical Implementation Guide
V3R72026-02-251 of 43 findings match
Cisco IOS XE Router NDM Security Technical Implementation Guide
V3R72026-02-111 of 42 findings match
Cisco IOS XE Switch NDM Security Technical Implementation Guide
V3R62026-03-041 of 42 findings match
Cisco IOS XR Router NDM Security Technical Implementation Guide
V3R62026-02-261 of 27 findings match
Cisco ISE NAC Security Technical Implementation Guide
V2R32025-12-101 of 30 findings match
Cisco NX OS Switch NDM Security Technical Implementation Guide
V3R22024-09-101 of 42 findings match
Domain Name System (DNS) Security Requirements Guide
V4R22025-12-191 of 119 findings match
Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide
V1R32025-10-011 of 47 findings match
F5 BIG-IP TMOS Firewall Security Technical Implementation Guide
V1R12024-09-091 of 14 findings match
F5 NGINX Security Technical Implementation Guide
V1R12026-01-071 of 32 findings match
Firewall Security Requirements Guide
V3R32025-09-221 of 35 findings match
Fortinet FortiGate Firewall Security Technical Implementation Guide
V1R42025-11-191 of 29 findings match
HPE Alletra Storage ArcusOS Web Server Security Technical Implementation Guide
V1R12026-03-031 of 6 findings match
HPE Aruba Networking AOS Wireless Security Technical Implementation Guide
V1R22026-02-251 of 14 findings match
Ivanti Connect Secure VPN Security Technical Implementation Guide
V2R22025-09-091 of 15 findings match
Juniper Router NDM Security Technical Implementation Guide
V3R22024-12-051 of 49 findings match
Network WLAN AP-NIPR Platform Security Technical Implementation Guide
V7R32023-02-131 of 11 findings match
Network WLAN Bridge Platform Security Technical Implementation Guide
V7R22023-02-131 of 6 findings match
Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide
V2R32026-02-131 of 31 findings match

Web / Application Server

21 STIGs
IBM WebSphere Traditional V9.x Security Technical Implementation Guide
V2R12026-02-2612 of 77 findings match
Application Security and Development Security Technical Implementation Guide
V6R42025-09-0911 of 286 findings match
HPE 3PAR SSMC Web Server Security Technical Implementation Guide
V2R12024-05-307 of 19 findings match
Web Server Security Requirements Guide
V4R42025-09-106 of 126 findings match
Apache Tomcat Application Server 9 Security Technical Implementation Guide
V3R42026-02-255 of 79 findings match
Application Server Security Requirements Guide
V4R42025-09-105 of 137 findings match
IBM WebSphere Liberty Server Security Technical Implementation Guide
V2R42026-02-264 of 30 findings match
Adobe ColdFusion Security Technical Implementation Guide
V1R12025-12-193 of 84 findings match
Show 13 more STIGs in this category →
Apache Server 2.4 UNIX Server Security Technical Implementation Guide
V3R22024-12-043 of 47 findings match
Apache Server 2.4 Windows Server Security Technical Implementation Guide
V3R42026-02-253 of 49 findings match
JBoss Enterprise Application Platform 6.3 Security Technical Implementation Guide
V2R62025-02-203 of 67 findings match
Microsoft Exchange 2016 Mailbox Server Security Technical Implementation Guide
V2R62023-12-183 of 64 findings match
Microsoft Exchange 2019 Mailbox Server Security Technical Implementation Guide
V2R32025-05-143 of 66 findings match
Microsoft IIS 10.0 Site Security Technical Implementation Guide
V2R152026-02-263 of 44 findings match
Red Hat Ansible Automation Controller Web Server Security Technical Implementation Guide
V2R32025-11-203 of 28 findings match
Application Programming Interface (API) Security Requirements Guide
V1R12025-09-242 of 65 findings match
Microsoft IIS 10.0 Server Security Technical Implementation Guide
V3R72026-02-262 of 40 findings match
Apache Server 2.4 UNIX Site Security Technical Implementation Guide
V2R62025-02-121 of 27 findings match
Apache Server 2.4 Windows Site Security Technical Implementation Guide
V2R32026-02-251 of 16 findings match
Microsoft Exchange 2019 Edge Server Security Technical Implementation Guide
V2R22024-12-061 of 68 findings match
Red Hat Ansible Automation Controller Application Server Security Technical Implementation Guide
V2R42025-11-201 of 16 findings match

Virtualization / Container

34 STIGs
Nutanix Acropolis GPOS Security Technical Implementation Guide
V1R12026-02-248 of 106 findings match
VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation Guide
V1R12023-10-296 of 104 findings match
VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation Guide
V2R12024-07-116 of 106 findings match
Kubernetes Security Technical Implementation Guide
V2R62026-02-125 of 92 findings match
Virtual Machine Manager Security Requirements Guide
V2R32025-09-105 of 198 findings match
VMware vSphere 7.0 vCenter Appliance Photon OS Security Technical Implementation Guide
V1R42024-12-164 of 113 findings match
Container Platform Security Requirements Guide
V2R42025-09-103 of 188 findings match
VMware vSphere 7.0 ESXi Security Technical Implementation Guide
V1R42025-02-113 of 75 findings match
Show 26 more STIGs in this category →
VMware vSphere 8.0 vCenter Appliance Management Interface (VAMI) Security Technical Implementation Guide
V1R12023-10-293 of 24 findings match
Red Hat OpenShift Container Platform 4.x Security Technical Implementation Guide
V2R52025-12-042 of 83 findings match
VMware vSphere 7.0 VAMI Security Technical Implementation Guide
V1R22023-06-152 of 28 findings match
VMware vSphere 7.0 vCenter Appliance RhttpProxy Security Technical Implementation Guide
V1R12023-02-212 of 8 findings match
VMware vSphere 8.0 ESXi Security Technical Implementation Guide
V2R32025-02-112 of 76 findings match
VMware vSphere 8.0 vCenter Appliance Management Interface (VAMI) Security Technical Implementation Guide
V2R12024-07-112 of 22 findings match
VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) Security Technical Implementation Guide
V1R12023-10-292 of 33 findings match
Nutanix Acropolis Application Server Security Technical Implementation Guide
V1R12026-02-241 of 31 findings match
Rancher Government Solutions RKE2 Security Technical Implementation Guide
V2R62026-02-131 of 21 findings match
VMware vSphere 7.0 vCenter Appliance EAM Security Technical Implementation Guide
V1R22023-06-151 of 33 findings match
VMware vSphere 7.0 vCenter Appliance Lookup Service Security Technical Implementation Guide
V1R22023-06-151 of 31 findings match
VMware vSphere 7.0 vCenter Appliance Perfcharts Security Technical Implementation Guide
V1R12023-02-211 of 34 findings match
VMware vSphere 7.0 vCenter Appliance STS Security Technical Implementation Guide
V1R22023-06-151 of 31 findings match
VMware vSphere 7.0 vCenter Appliance UI Security Technical Implementation Guide
V1R22023-06-151 of 33 findings match
VMware vSphere 7.0 vCenter Security Technical Implementation Guide
V1R32023-12-211 of 57 findings match
VMware vSphere 8.0 ESXi Security Technical Implementation Guide
V1R12023-10-111 of 73 findings match
VMware vSphere 8.0 vCenter Appliance ESX Agent Manager (EAM) Security Technical Implementation Guide
V2R22024-12-161 of 34 findings match
VMware vSphere 8.0 vCenter Appliance ESX Agent Manager (EAM) Security Technical Implementation Guide
V1R12023-10-291 of 34 findings match
VMware vSphere 8.0 vCenter Appliance Lookup Service Security Technical Implementation Guide
V1R12023-10-291 of 34 findings match
VMware vSphere 8.0 vCenter Appliance Lookup Service Security Technical Implementation Guide
V2R12024-07-111 of 34 findings match
VMware vSphere 8.0 vCenter Appliance Perfcharts Security Technical Implementation Guide
V1R12023-10-291 of 33 findings match
VMware vSphere 8.0 vCenter Appliance Perfcharts Security Technical Implementation Guide
V2R12024-07-111 of 33 findings match
VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) Security Technical Implementation Guide
V2R12024-07-111 of 33 findings match
VMware vSphere 8.0 vCenter Appliance User Interface (UI) Security Technical Implementation Guide
V1R12023-10-291 of 33 findings match
VMware vSphere 8.0 vCenter Appliance User Interface (UI) Security Technical Implementation Guide
V2R12024-07-111 of 33 findings match
VMware vSphere 8.0 vCenter Security Technical Implementation Guide
V2R32025-06-091 of 67 findings match

Cloud / Identity Service

1 STIG
Active Directory Domain Security Technical Implementation Guide
V3R72026-02-111 of 36 findings match

Endpoint Security Management

12 STIGs
BlackBerry Enterprise Mobility Server 2.x Security Technical Implementation Guide
V1R32020-05-156 of 23 findings match
BlackBerry Enterprise Mobility Server 3.x Security Technical Implementation Guide
V1R22023-05-176 of 27 findings match
Ivanti Sentry 9.x ALG Security Technical Implementation Guide
V3R12024-09-254 of 32 findings match
Tanium 7.x Application on TanOS Security Technical Implementation Guide
V2R22025-02-114 of 75 findings match
Tanium 7.x Security Technical Implementation Guide
V2R32025-05-144 of 98 findings match
Forescout Network Access Control Security Technical Implementation Guide
V2R42025-06-122 of 26 findings match
Unified Endpoint Management Server Security Requirements Guide
V2R42025-09-102 of 138 findings match
Arctic Wolf CylanceON-PREM Security Technical Implementation Guide
V1R12025-06-111 of 16 findings match
Show 4 more STIGs in this category →
Axonius Federal Systems Ax-OS Security Technical Implementation Guide
V1R22025-11-251 of 16 findings match
ISEC7 Sphere Security Technical Implementation Guide
V3R12024-08-201 of 34 findings match
Microsoft Windows Defender Firewall with Advanced Security Security Technical Implementation Guide
V2R22023-08-231 of 21 findings match
Xylok Security Suite 20.x Security Technical Implementation Guide
V1R22025-12-041 of 19 findings match

Productivity Application

4 STIGs
AvePoint Compliance Guardian Security Technical Implementation Guide
V1R12023-02-212 of 10 findings match
AvePoint DocAve 6 Security Technical Implementation Guide
V1R22022-08-242 of 9 findings match
Mozilla Firefox Security Technical Implementation Guide
V6R72025-11-251 of 34 findings match
SPEC Innovations Innoslate 4.x Security Technical Implementation Guide
V1R12022-08-311 of 11 findings match

Uncategorized

1 STIG
Microsoft SharePoint 2013 Security Technical Implementation Guide
22024-12-103 of 37 findings match