# NIST 800-53 Access Control (AC)

Browse NIST 800-53 Access Control (AC) controls — who can access systems and data, and under what conditions — with implementation guidance and cross-framework mappings.

* [AC-1: Policy and Procedures](/compliance/nist-sp-800-53/ac/ac-1)
* [AC-2: Account Management](/compliance/nist-sp-800-53/ac/ac-2)
* [AC-3: Access Enforcement](/compliance/nist-sp-800-53/ac/ac-3)
* [AC-4: Information Flow Enforcement](/compliance/nist-sp-800-53/ac/ac-4)
* [AC-5: Separation of Duties](/compliance/nist-sp-800-53/ac/ac-5)
* [AC-6: Least Privilege](/compliance/nist-sp-800-53/ac/ac-6)
* [AC-7: Unsuccessful Logon Attempts](/compliance/nist-sp-800-53/ac/ac-7)
* [AC-8: System Use Notification](/compliance/nist-sp-800-53/ac/ac-8)
* [AC-9: Previous Logon Notification](/compliance/nist-sp-800-53/ac/ac-9)
* [AC-10: Concurrent Session Control](/compliance/nist-sp-800-53/ac/ac-10)
* [AC-11: Device Lock](/compliance/nist-sp-800-53/ac/ac-11)
* [AC-12: Session Termination](/compliance/nist-sp-800-53/ac/ac-12)
* [AC-14: Permitted Actions Without Identification or Authentication](/compliance/nist-sp-800-53/ac/ac-14)
* [AC-16: Security and Privacy Attributes](/compliance/nist-sp-800-53/ac/ac-16)
* [AC-17: Remote Access](/compliance/nist-sp-800-53/ac/ac-17)
* [AC-18: Wireless Access](/compliance/nist-sp-800-53/ac/ac-18)
* [AC-19: Access Control for Mobile Devices](/compliance/nist-sp-800-53/ac/ac-19)
* [AC-20: Use of External Systems](/compliance/nist-sp-800-53/ac/ac-20)
* [AC-21: Information Sharing](/compliance/nist-sp-800-53/ac/ac-21)
* [AC-22: Publicly Accessible Content](/compliance/nist-sp-800-53/ac/ac-22)
* [AC-23: Data Mining Protection](/compliance/nist-sp-800-53/ac/ac-23)
* [AC-24: Access Control Decisions](/compliance/nist-sp-800-53/ac/ac-24)
* [AC-25: Reference Monitor](/compliance/nist-sp-800-53/ac/ac-25)

Experience superior visibility and a simpler approach to cyber risk management

[Get a demo](https://www.upguard.com/contact-sales)

[Free trial](https://www.upguard.com/demo)