ac-20 - Use of External Systems

[tdonaworth]

Access Control

AC-20 - Use of External Systems

a. Identify [ACF-defined controls asserted to be implemented on external systems], consistent with the trust relationships established with other organizations owning, operating, and/or maintaining external systems, allowing authorized individuals to:

1. Access the system from external systems; and
   
2. Process, store, or transmit organization-controlled information using external systems; or

b. Prohibit the use of [ACF-defined types of external systems]

OPS Implementation

• TODO