Navigate

CCI-002176

CCI-002176 Definition

The information system controls access based upon organization-defined users authorized to assume such roles, employing the organization-defined role-based access control policy.

Status
Type	CheckType.technical

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Compelling Evidence

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002176.

Control	Description
AC-3 (7)	The information system enforces a role-based access control policy over defined subjects and objects and controls access based upon [Assignment: organization-defined roles and users authorized to assume such roles].