File contents PR.AC-03 PR.AC-03
Subcategory of: Identity Management, Authentication and Access Control (PR.AC)
High-Level Description
Function: PROTECT (PR)
Framework: NIST Cybersecurity Framework v2.0
Remote access is managed
What to Check
How to Test
Step 1: Identify Current Profile
Determine the organization's current and target CSF profile tier for PR.AC-03.
Step 2: Assess Outcome Achievement
# Review organizational policies and procedures
# Check for evidence that PR.AC-03 outcome is met
# Interview stakeholders responsible for PROTECT
Step 3: Map to Technical Controls
Identify which SP 800-53 controls implement this CSF outcome and verify their operating effectiveness.
Tools
Tool
Purpose
Usage
cloud-audit-mcp
Assess cloud security posture
cloud_audit_* tools
Manual Review
Policy and procedure review
Interviews and documentation
Remediation Guide
Achieve the PR.AC-03 PR.AC-03 outcome:
Remote access is managed
Risk Assessment
Finding
Severity
Impact
PR.AC-03 PR.AC-03 outcome not achieved
High
PROTECT Function Gap
CWE Categories
CWE ID
Title
CWE-284
Improper Access Control
References
Checklist
1 --- 2 name: pr-ac-03-prac-03 3 description: Remote access is managed 4 --- 5 6 # PR.AC-03 PR.AC-03 7 8 > **Subcategory of:** Identity Management, Authentication and Access Control (PR.AC) 9 10 ## High-Level Description 11 12 **Function:** PROTECT (PR) 13 **Framework:** NIST Cybersecurity Framework v2.0 14 15 Remote access is managed 16 17 ## What to Check 18 19 - [ ] Verify PR.AC-03 PR.AC-03 outcome is achieved 20 - [ ] Review documentation and evidence for PR.AC-03 21 - [ ] Assess organizational maturity for PROTECT function 22 - [ ] Map to SP 800-53 controls that satisfy PR.AC-03 23 24 ## How to Test 25 26 ### Step 1: Identify Current Profile 27 28 Determine the organization's current and target CSF profile tier for PR.AC-03. 29 30 ### Step 2: Assess Outcome Achievement 31 32 ``` 33 # Review organizational policies and procedures 34 # Check for evidence that PR.AC-03 outcome is met 35 # Interview stakeholders responsible for PROTECT 36 ``` 37 38 ### Step 3: Map to Technical Controls 39 40 Identify which SP 800-53 controls implement this CSF outcome and verify their operating effectiveness. 41 42 ## Tools 43 44 | Tool | Purpose | Usage | 45 | --------------- | ----------------------------- | ---------------------------- | 46 | cloud-audit-mcp | Assess cloud security posture | `cloud_audit_*` tools | 47 | Manual Review | Policy and procedure review | Interviews and documentation | 48 49 ## Remediation Guide 50 51 Achieve the PR.AC-03 PR.AC-03 outcome: 52 53 Remote access is managed 54 55 ## Risk Assessment 56 57 | Finding | Severity | Impact | 58 | -------------------------------------- | -------- | -------------------- | 59 | PR.AC-03 PR.AC-03 outcome not achieved | High | PROTECT Function Gap | 60 61 ## CWE Categories 62 63 | CWE ID | Title | 64 | ------- | ----------------------- | 65 | CWE-284 | Improper Access Control | 66 67 ## References 68 69 - [NIST CSF v2.0](https://www.nist.gov/cyberframework) 70 - [NIST CSF v2.0 Reference Tool](https://csrc.nist.gov/projects/cybersecurity-framework/filters#/csf/filters) 71 - [CSF 2.0 Quick Start Guides](https://www.nist.gov/cyberframework/getting-started) 72 73 ## Checklist 74 75 - [ ] Current profile tier assessed 76 - [ ] Target profile tier defined 77 - [ ] Gap analysis completed 78 - [ ] SP 800-53 control mapping verified 79 - [ ] Implementation roadmap exists
commit 6b0c6beadd
Frequently asked questions How do I install the PR.AC-03_prac-03 skill? Run npx skillmds@latest add cyberstrikeus/pr-ac-03-prac-03 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
What does the PR.AC-03_prac-03 skill do? Remote access is managed It is listed under Coding & Dev Tools on SkillMD.
Is PR.AC-03_prac-03 safe to use? SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
Which AI agents work with PR.AC-03_prac-03? This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Is PR.AC-03_prac-03 free to use? Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
Who published PR.AC-03_prac-03? cyberstrikeus (@cyberstrikeus) published this skill. Their other Agent Skills are listed on their SkillMD profile.
cyberstrikeus