BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

AC-06(01) Authorize Access to Security Functions

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged AC Moderate baselineHigh baseline part of AC-6

Title

Authorize Access to Security Functions

Control

Authorize access for [Assignment: individuals and roles] to:
(a) [Assignment: organization-defined security functions (deployed in hardware, software, and firmware)] ; and
(b) [Assignment: security-relevant information].

Discussion

Security functions include establishing system accounts, configuring access authorizations (i.e., permissions, privileges), configuring settings for events to be audited, and establishing intrusion detection parameters. Security-relevant information includes filtering rules for routers or firewalls, configuration parameters for security services, cryptographic key management information, and access control lists. Authorized personnel include security administrators, system administrators, system security officers, system programmers, and other privileged users.

Parameters

ac-6.1_prm_2: organization-defined security functions (deployed in hardware, software, and firmware)
ac-06.01_odp.01: individuals and roles
ac-06.01_odp.02: security functions (deployed in hardware)
ac-06.01_odp.03: security functions (deployed in software)
ac-06.01_odp.04: security functions (deployed in firmware)
ac-06.01_odp.05: security-relevant information

Related controls

ac-17, ac-18, ac-19, au-9, pe-2

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).