FedRAMP Controls / AC

AC-17(1) Monitoring and Control

Family AC
Baselines moderate
Mapped KSIs 3

Control statement

Employ automated mechanisms to monitor and control remote access methods.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

Covered by these Key Security Indicators

KSITitleCategory
KSI-IAM-05Least Privilege
_Persistently_ ensure that identity and access management employs measures to ensure each user or device can only access the resources they need.
Identity and Access Management
KSI-MLA-01Security Information and Event Management (SIEM)
Operate a Security Information and Event Management (SIEM) or similar system(s) for centralized, tamper-resistent logging of events, activities, and changes.
Monitoring, Logging, and Auditing
KSI-MLA-07Event Types
Maintain a list of information resources and event types that will be monitored, logged, and audited, then do so.
Monitoring, Logging, and Auditing