CCI-002171

CCI-002171 Definition

The information system enforces a role-based access control policy over organization-defined subjects.

Status
Type	CheckType.technical

The controls below (if any) were marked by NIST as being related to CCI-002171.

Control	Description
AC-3 (7)	The information system enforces a role-based access control policy over defined subjects and objects and controls access based upon [Assignment: organization-defined roles and users authorized to assume such roles].