AC.1.002 User Access Restrictions (CMMC Level 1)

/
Limit information system access to the types of transactions and functions that authorized users are permitted to execute.

AC.1.001 Basic Security Requirements (CMMC Level 1)

/
Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems).