CCI-002172

CCI-002172 Definition

The information system enforces a role-based access control policy over organization-defined objects.

Status
Type	CheckType.technical

The controls below (if any) were marked by NIST as being related to CCI-002172.

Control	Description
AC-3 (7)	The information system enforces a role-based access control policy over defined subjects and objects and controls access based upon [Assignment: organization-defined roles and users authorized to assume such roles].