FedRAMP Controls / AC

AC-17(4) Privileged Commands and Access

Family AC
Baselines moderate
Mapped KSIs 0

Control statement

(a) Authorize the execution of privileged commands and access to security-relevant information via remote access only in a format that provides assessable evidence and for the following needs: {{ insert: param, ac-17.4_prm_1 }} ; and
    (b) Document the rationale for remote access in the security plan for the system.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

No 20x Key Security Indicators map to this control in the current catalog version.