Home NIST Guidelines AC-1
AC-1 Access Control

Access Control Policy and Procedures

Medium Priority Intermediate NIST CSF

The organization develops, documents, and disseminates access control policy and procedures that address purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance.

Implementation Guidance

Develop comprehensive access control policies that define who can access what resources, under what conditions, and for what purposes. Include procedures for granting, modifying, and revoking access rights.

Best Practices

Implement role-based access control (RBAC), conduct regular access reviews, maintain detailed access logs, use principle of least privilege

Quick Facts

Guideline ID AC-1
Category Access Control
Subcategory Policy and Procedures
Priority Medium
Level Intermediate
Last Updated Mar 1, 2026
Get Expert Help Free Assessment

Related Guidelines

Explore other guidelines in the Access Control category.

AC-11 Medium

Session Lock

NIST AC-11 control implementation guidance for Session Lock. This control addresses Access Control requirements and provides comprehensive security me...

AC-12 Medium

Session Termination

NIST AC-12 control implementation guidance for Session Termination. This control addresses Access Control requirements and provides comprehensive secu...

AC-23 Medium

Access Control 23

NIST AC-23 control implementation guidance for Access Control 23. This control addresses Access Control requirements and provides comprehensive securi...

Need Help Implementing This Guideline?

Our certified experts can help you align NIST guidelines with your HIPAA compliance program.

Contact Our Experts View All Guidelines