FedRAMP Controls / AC

AC-11 Device Lock

Family AC
Baselines moderate
Mapped KSIs 0

Control statement

a. Prevent further access to the system by {{ insert: param, ac-11_odp.01 }} ; and
    b. Retain the device lock until the user reestablishes access using established identification and authentication procedures.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

No 20x Key Security Indicators map to this control in the current catalog version.