5340    ACCESS CONTROL
(New 03/08)

Agency management is responsible for ensuring the appropriate physical, technical, and administrative controls are in place to support proper access to agency information assets. These controls must be based on both business and security requirements to prevent and detect unauthorized access, and must, at a minimum, include the following controls

1. Mobile and Telework Access-Mobile and telework access controls include, but are not limited to the following:
   
   
   1. Identifying computing systems that allow dial-up communication or Internet access to sensitive or confidential information, and information necessary for the support of agency critical applications.
      
      
   2. Periodically changing dial-up access telephone numbers.
      
      
   3. Auditing usage of dial-up communications and Internet access for security violations.

AUTHORITY          STANDARDS          GUIDANCE          FORMS          TOOLS