Skip to main content

Solution design and technology roadmapping

Solution Assessment Technology Roadmaps Integration Design Solution Architecture Technical Design

Security assessments, IAM, and compliance

Assessments IAM Compliance Security Baseline Cyber Innovation

Network and Platform

Network architecture and cloud platforms

Network Design Cloud Strategy Modernisation

Enterprise Architecture

Business-technology alignment

Business Alignment Portfolio Analysis Governance

View all services

Projects Case Studies Insights Tools About

Services

Solution Assessment Technology Roadmaps Integration Design Solution Architecture Technical Design

Assessments IAM Compliance Security Baseline Cyber Innovation

Network and Platform

Network Design Cloud Strategy Modernisation

Enterprise Architecture

Business Alignment Portfolio Analysis Governance

Projects Case Studies Insights Tools About Contact

Strategic technology consulting for Australian organisations navigating complexity.

Services

Architecture
Cyber Security
Network and Platform
Enterprise Architecture

Company

About
Products
Frameworks
Cross-Framework Mapping
Projects
Case Studies
Insights
Contact

Contact

[email protected]
Australia
LinkedIn

© 2026 Muon Partners. All rights reserved.

ABN 50 669 022 315 · A Muon Group company.

Privacy Policy Terms of Service

Frameworks
SP 800-53
Access Control
SP800-53-AC-21(2)

SP800-53-AC-21(2)Active

Information Search and Retrieval

Statement

Implement information search and retrieval services that enforce information-sharing restrictions.

Location

Control Family: Access Control

Control Details

Identifier: SP800-53-AC-21(2)
Family: AC
Parent Control: SP800-53-AC-21

Organisation-Defined Parameters

ac-21.02_odp: information-sharing restrictions

Supplemental Guidance

Information search and retrieval services identify information system resources relevant to an information need.

Assessment Objective

information search and retrieval services that enforce information-sharing restrictions are implemented.

No cross-framework mappings available

← Back to Access Control

Access Control147 controls

SP800-53-AC-1Policy and Procedures SP800-53-AC-2Account Management SP800-53-AC-2(1)Automated System Account Management SP800-53-AC-2(2)Automated Temporary and Emergency Account Management SP800-53-AC-2(3)Disable Accounts SP800-53-AC-2(4)Automated Audit Actions SP800-53-AC-2(5)Inactivity Logout SP800-53-AC-2(6)Dynamic Privilege Management SP800-53-AC-2(7)Privileged User Accounts SP800-53-AC-2(8)Dynamic Account Management SP800-53-AC-2(9)Restrictions on Use of Shared and Group Accounts SP800-53-AC-2(10)Shared and Group Account Credential Change SP800-53-AC-2(11)Usage Conditions SP800-53-AC-2(12)Account Monitoring for Atypical Usage SP800-53-AC-2(13)Disable Accounts for High-risk Individuals SP800-53-AC-3Access Enforcement SP800-53-AC-3(1)Restricted Access to Privileged Functions SP800-53-AC-3(2)Dual Authorization SP800-53-AC-3(3)Mandatory Access Control SP800-53-AC-3(4)Discretionary Access Control SP800-53-AC-3(5)Security-relevant Information SP800-53-AC-3(6)Protection of User and System Information SP800-53-AC-3(7)Role-based Access Control SP800-53-AC-3(8)Revocation of Access Authorizations SP800-53-AC-3(9)Controlled Release SP800-53-AC-3(10)Audited Override of Access Control Mechanisms SP800-53-AC-3(11)Restrict Access to Specific Information Types SP800-53-AC-3(12)Assert and Enforce Application Access SP800-53-AC-3(13)Attribute-based Access Control SP800-53-AC-3(14)Individual Access SP800-53-AC-3(15)Discretionary and Mandatory Access Control SP800-53-AC-4Information Flow Enforcement SP800-53-AC-4(1)Object Security and Privacy Attributes SP800-53-AC-4(2)Processing Domains SP800-53-AC-4(3)Dynamic Information Flow Control SP800-53-AC-4(4)Flow Control of Encrypted Information SP800-53-AC-4(5)Embedded Data Types SP800-53-AC-4(6)Metadata SP800-53-AC-4(7)One-way Flow Mechanisms SP800-53-AC-4(8)Security and Privacy Policy Filters SP800-53-AC-4(9)Human Reviews SP800-53-AC-4(10)Enable and Disable Security or Privacy Policy Filters SP800-53-AC-4(11)Configuration of Security or Privacy Policy Filters SP800-53-AC-4(12)Data Type Identifiers SP800-53-AC-4(13)Decomposition into Policy-relevant Subcomponents SP800-53-AC-4(14)Security or Privacy Policy Filter Constraints SP800-53-AC-4(15)Detection of Unsanctioned Information SP800-53-AC-4(16)Information Transfers on Interconnected Systems SP800-53-AC-4(17)Domain Authentication SP800-53-AC-4(18)Security Attribute Binding SP800-53-AC-4(19)Validation of Metadata SP800-53-AC-4(20)Approved Solutions SP800-53-AC-4(21)Physical or Logical Separation of Information Flows SP800-53-AC-4(22)Access Only SP800-53-AC-4(23)Modify Non-releasable Information SP800-53-AC-4(24)Internal Normalized Format SP800-53-AC-4(25)Data Sanitization SP800-53-AC-4(26)Audit Filtering Actions SP800-53-AC-4(27)Redundant/Independent Filtering Mechanisms SP800-53-AC-4(28)Linear Filter Pipelines SP800-53-AC-4(29)Filter Orchestration Engines SP800-53-AC-4(30)Filter Mechanisms Using Multiple Processes SP800-53-AC-4(31)Failed Content Transfer Prevention SP800-53-AC-4(32)Process Requirements for Information Transfer SP800-53-AC-5Separation of Duties SP800-53-AC-6Least Privilege SP800-53-AC-6(1)Authorize Access to Security Functions SP800-53-AC-6(2)Non-privileged Access for Nonsecurity Functions SP800-53-AC-6(3)Network Access to Privileged Commands SP800-53-AC-6(4)Separate Processing Domains SP800-53-AC-6(5)Privileged Accounts SP800-53-AC-6(6)Privileged Access by Non-organizational Users SP800-53-AC-6(7)Review of User Privileges SP800-53-AC-6(8)Privilege Levels for Code Execution SP800-53-AC-6(9)Log Use of Privileged Functions SP800-53-AC-6(10)Prohibit Non-privileged Users from Executing Privileged Functions SP800-53-AC-7Unsuccessful Logon Attempts SP800-53-AC-7(1)Automatic Account Lock SP800-53-AC-7(2)Purge or Wipe Mobile Device SP800-53-AC-7(3)Biometric Attempt Limiting SP800-53-AC-7(4)Use of Alternate Authentication Factor SP800-53-AC-8System Use Notification SP800-53-AC-9Previous Logon Notification SP800-53-AC-9(1)Unsuccessful Logons SP800-53-AC-9(2)Successful and Unsuccessful Logons SP800-53-AC-9(3)Notification of Account Changes SP800-53-AC-9(4)Additional Logon Information SP800-53-AC-10Concurrent Session Control SP800-53-AC-11Device Lock SP800-53-AC-11(1)Pattern-hiding Displays SP800-53-AC-12Session Termination SP800-53-AC-12(1)User-initiated Logouts SP800-53-AC-12(2)Termination Message SP800-53-AC-12(3)Timeout Warning Message SP800-53-AC-13Supervision and Review — Access Control SP800-53-AC-14Permitted Actions Without Identification or Authentication SP800-53-AC-14(1)Necessary Uses SP800-53-AC-15Automated Marking SP800-53-AC-16Security and Privacy Attributes SP800-53-AC-16(1)Dynamic Attribute Association SP800-53-AC-16(2)Attribute Value Changes by Authorized Individuals SP800-53-AC-16(3)Maintenance of Attribute Associations by System SP800-53-AC-16(4)Association of Attributes by Authorized Individuals SP800-53-AC-16(5)Attribute Displays on Objects to Be Output SP800-53-AC-16(6)Maintenance of Attribute Association SP800-53-AC-16(7)Consistent Attribute Interpretation SP800-53-AC-16(8)Association Techniques and Technologies SP800-53-AC-16(9)Attribute Reassignment — Regrading Mechanisms SP800-53-AC-16(10)Attribute Configuration by Authorized Individuals SP800-53-AC-17Remote Access SP800-53-AC-17(1)Monitoring and Control SP800-53-AC-17(2)Protection of Confidentiality and Integrity Using Encryption SP800-53-AC-17(3)Managed Access Control Points SP800-53-AC-17(4)Privileged Commands and Access SP800-53-AC-17(5)Monitoring for Unauthorized Connections SP800-53-AC-17(6)Protection of Mechanism Information SP800-53-AC-17(7)Additional Protection for Security Function Access SP800-53-AC-17(8)Disable Nonsecure Network Protocols SP800-53-AC-17(9)Disconnect or Disable Access SP800-53-AC-17(10)Authenticate Remote Commands SP800-53-AC-18Wireless Access SP800-53-AC-18(1)Authentication and Encryption SP800-53-AC-18(2)Monitoring Unauthorized Connections SP800-53-AC-18(3)Disable Wireless Networking SP800-53-AC-18(4)Restrict Configurations by Users SP800-53-AC-18(5)Antennas and Transmission Power Levels SP800-53-AC-19Access Control for Mobile Devices SP800-53-AC-19(1)Use of Writable and Portable Storage Devices SP800-53-AC-19(2)Use of Personally Owned Portable Storage Devices SP800-53-AC-19(3)Use of Portable Storage Devices with No Identifiable Owner SP800-53-AC-19(4)Restrictions for Classified Information SP800-53-AC-19(5)Full Device or Container-based Encryption SP800-53-AC-20Use of External Systems SP800-53-AC-20(1)Limits on Authorized Use SP800-53-AC-20(2)Portable Storage Devices — Restricted Use SP800-53-AC-20(3)Non-organizationally Owned Systems — Restricted Use SP800-53-AC-20(4)Network Accessible Storage Devices — Prohibited Use SP800-53-AC-20(5)Portable Storage Devices — Prohibited Use SP800-53-AC-21Information Sharing SP800-53-AC-21(1)Automated Decision Support SP800-53-AC-21(2)Information Search and Retrieval SP800-53-AC-22Publicly Accessible Content SP800-53-AC-23Data Mining Protection SP800-53-AC-24Access Control Decisions SP800-53-AC-24(1)Transmit Access Authorization Information SP800-53-AC-24(2)No User or Process Identity SP800-53-AC-25Reference Monitor