# AC-3(2) — Dual Authorization

- **Control ID:** AC-3(2)
- **Family:** [AC](/md/families/AC.md)
- **Baselines:** No content available.
- **Enhancement of:** [AC-3](/md/controls/AC-3.md)

## Description

Enforce dual authorization for \[assignment\].

## Discussion

Dual authorization, also known as two-person control, reduces risk related to insider threats. Dual authorization mechanisms require the approval of two authorized individuals to execute. To reduce the risk of collusion, organizations consider rotating dual authorization duties. Organizations consider the risk associated with implementing dual authorization mechanisms when immediate responses are necessary to ensure public and environmental safety.

## Implementation guidance

No content available.

## CSF 2.0 subcategories

No content available.

## Related controls

- [CP-9](/md/controls/CP-9.md)
- [MP-6](/md/controls/MP-6.md)

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.