CCI-003639

Enforce organization-defined discretionary access control policies over defined subjects and objects where the policy specifies that a subject that has been granted access to information can grant its privileges to other subjects.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-003639.