CCI-000022

The information system enforces one or more organization-defined nondiscretionary access control policies over an organization-defined set of users and resources.

Implementation Guidance

Validation Procedures

Compelling Evidence

The controls below (if any) were marked by NIST as being related to CCI-000022.