Access Control Policy (AC)

This policy establishes a framework for managing and safeguarding access to organizational systems, networks, and data in compliance with the Cybersecurity Maturity Model Certification (CMMC) requirements. It ensures access is restricted to authorized users, aligning with CMMC Levels 1 and 2 practices to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). The policy covers user identification, role-based access control (RBAC), remote access, physical access controls, and auditing processes, with a strong emphasis on security, compliance, and accountability.