CCI-002349

Establish procedures or implement mechanisms to ensure organization-defined access control decisions are applied to each access request prior to access enforcement.

Implementation Guidance

The organization being inspected/assessed establishes and documents procedures to ensure access control decisions defined in AC-24, CCI 2348 are applied to each access request prior to access enforcement.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented procedures to ensure the organization being inspected/assessed establishes procedures to ensure access control decisions defined in AC-24, CCI 2348 are applied to each access request prior to access enforcement.

Compelling Evidence

1.) Signed and dated access control policy and/or standard operating procedure (SOP) or system security plan (SSP) that describes site's established procedures to ensure access control decisions defined in AC-24, CCI 2348 are applied to each access request prior to access enforcement.

The controls below (if any) were marked by NIST as being related to CCI-002349.