Compliance
NIST 800-53 AC-17 Remote Access: Evidence for VPN and Beyond
AC-17 requires documented rules and authorization for each type of remote access. See the evidence and gaps for VPN, SSH and zero trust setups.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
NIST 800-53 AC-16 Security and Privacy Attributes Explained
AC-16 binds labels such as sensitivity to data and subjects, and keeps them attached. Learn what it asks and how commercial teams apply it.
Oct 18, 20263 min read
Compliance
NIST 800-53 AC-15: Withdrawn, Automated Marking Moved to MP-3
AC-15 Automated Marking is withdrawn in Rev 5 and incorporated into MP-3 Media Marking. Here is what that means for your evidence.
Oct 18, 20262 min read
Compliance
NIST 800-53 AC-14: Actions Allowed Without Logging In
AC-14 asks you to list what users may do without identifying themselves, and justify it. See examples and the evidence to keep.
Oct 18, 20262 min read
Compliance
NIST 800-53 AC-13: Withdrawn, Where the Requirements Went
AC-13 Supervision and Review is withdrawn in Rev 5. Learn which controls absorbed it, AC-2 and AU-6, and what an auditor will ask for instead.
Oct 18, 20262 min read
Compliance
NIST 800-53 AC-12 Session Termination and Timeouts
AC-12 requires sessions to end automatically after conditions you define. Learn the triggers, enhancements and evidence to collect.
Oct 18, 20262 min read
Compliance
NIST 800-53 AC-11 Device Lock: Screen Locks Auditors Accept
AC-11 requires a device lock after a period you set and until the user reauthenticates. See what to configure and what evidence counts.
Oct 18, 20262 min read
Compliance
NIST 800-53 AC-10 Concurrent Session Control in Plain English
AC-10 limits how many sessions an account can hold at once. See how to set the limit, who it applies to, and what evidence to keep.
Oct 18, 20262 min read
Compliance
NIST 800-53 AC-1 Access Control Policy: What to Show an Auditor
AC-1 asks for a documented access control policy, procedures, a named owner and a review cycle. Here is what an auditor will look for.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.