AC-18(01) Authentication and Encryption
NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
All changes in this version
Title
Authentication and Encryption
Control
Protect wireless access to the system using authentication of [Selection (one or more): users; devices] and encryption.
Discussion
Wireless networking capabilities represent a significant potential vulnerability that can be exploited by adversaries. To protect systems with wireless access points, strong authentication of users and devices along with strong encryption can reduce susceptibility to threats by adversaries involving wireless technologies.
Parameters
ac-18.01_odp: [users; devices]
Related controls
sc-12, sc-13, sc-8
STIG rules that implement this control 15
Apple macOS 15 (Sequoia) V1R8
- APPL-15-002009 CAT II The macOS system must disable AirDrop.
- APPL-15-002080 CAT II The macOS system must disable Airplay Receiver.
- APPL-15-002271 CAT II The macOS system must disable iPhone Mirroring.
- APPL-15-005058 CAT II The macOS system must disable Handoff.
Apple macOS 26 (Tahoe) V1R4
- APPL-26-002009 CAT II The macOS system must disable AirDrop.
- APPL-26-002080 CAT II The macOS system must disable Airplay Receiver.
- APPL-26-002271 CAT II The macOS system must disable iPhone Mirroring.
- APPL-26-005058 CAT II The macOS system must disable Handoff.
Google Android 16 COBO Y26M10
- GOOG-16-008700 CAT II Google Android 16 must be configured to enable authentication of personal hotspot connections to the device using a preshared key.
Google Android 17 COBO Y26M06
- GOOG-17-007300 CAT II Google Android 17 must be configured to enable authentication of personal hotspot connections to the device using a preshared key.
Red Hat Enterprise Linux 10 V1R3
- RHEL-10-700860 CAT II RHEL 10 must disable Bluetooth.
- RHEL-10-700870 CAT II RHEL 10 must disable wireless network adapters.
Red Hat Enterprise Linux 9 V2R10
- RHEL-09-291035 CAT II RHEL 9 Bluetooth must be disabled.
- RHEL-09-291040 CAT II RHEL 9 wireless network adapters must be disabled.
Samsung Android 16 COBO Y26M10
- KNOX-16-007700 CAT II Samsung Android must be configured to enable authentication of personal hotspot connections to the device using a preshared key.