AC-17.3: Managed Access Control Points

Access control policy

procedures addressing remote access to the system

system design documentation

list of all managed network access control points

system configuration settings and associated documentation

system audit records

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

Mechanisms routing all remote accesses through managed network access control points