In accordance with laws, Executive Orders, directives, policies, regulations, or standards, the public is not authorized access to nonpublic information (e.g., information protected under the Privacy Act, FCI, and proprietary information). This requirement addresses systems that are controlled by the organization and accessible to the public, typically without identification or authentication. 

A frequent review of all publicly accessible systems must be performed to ensure that nonpublic information is not included. 

This checklist list must be reviewed and amended on a regular basis to ensure the sites listed are complete.