Affirming Official Readiness and SPRS Estimator

AC.L1-b.1.i

Limit system access to authorized users

AC.L1-b.1.ii

Limit access to permitted transactions and functions

AC.L1-b.1.iii

Verify and control connections to external systems

AC.L1-b.1.iv

Control information posted on publicly accessible systems

IA.L1-b.1.v

Identify users, processes, and devices

IA.L1-b.1.vi

Authenticate users, processes, and devices

MP.L1-b.1.vii

Sanitize or destroy media containing FCI before disposal

PE.L1-b.1.viii

Limit physical access to systems and equipment

PE.L1-b.1.ix

Escort visitors, keep logs, and control physical access devices

SC.L1-b.1.x

Monitor and protect communications at system boundaries

SC.L1-b.1.xi

Separate publicly accessible subnetworks

SI.L1-b.1.xii

Identify, report, and correct system flaws timely

SI.L1-b.1.xiii

Provide malicious code protection

SI.L1-b.1.xiv

Update malicious code protection mechanisms

SI.L1-b.1.xv

Perform periodic and real-time scans