FAR 52.204-21 / CMMC 2.0 Level 1 Access Control

Ensure that only authorized persons can access your systems and information.

AC.L1-B.1.I

Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems).
AC.L1-B.1.II

Limit information system access to the types of transactions and functions that authorized users are permitted to execute.
AC.L1-B.1.III

Verify and control/limit connections to and use of external information systems.
AC.L1-B.1.IV

Control information posted or processed on publicly accessible information systems.

Need help putting this into practice? See our CMMC Level 1 compliance services or read our CMMC Level 1 articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.