ac-14 - Permitted Actions Without Identification or Authentication

[tdonaworth]

Access Control

AC-14 - Permitted Actions Without Identification or Authentication

a. Identify [System owners must determine any user action] that can be performed on the system without identification or authentication consistent with organizational mission and business functions; and
b. Document and provide supporting rationale in the security plan for the system, user actions not requiring identification or authentication.

OPS Implementation

No actions can be taken with OPS without initial user authentication.

Related Documentaiton

AC-6

#443

TODO: screenshot