CCI-003638

Enforce organization-defined discretionary access control policies over defined subjects and objects where the policy specifies that a subject that has been granted access to information can pass the information to any other subjects or objects.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-003638.