AC.L2-3.1.16  

Reference: CMMC 2.11

Family: AC

Level Introduced: 2

Title: Wireless Access Authorization

Practice:
Authorize wireless access prior to allowing such connections.

CMMC Clarification:
You should base the use of wireless technologies on approved guidelines from management. These guidelines may include the following:
• types of devices, such as corporate or privately-owned equipment;
• configuration requirements of the devices; and
• authorization requirements before granting such connections.

Example
Your company is implementing a wireless network at their headquarters. You work with management to draft policies about the use of the wireless network. You allow only company-approved devices that contain verified security configuration settings. Also, you write usage restrictions to follow for anyone who wants to use the wireless network.

Source: CMMC v2.0