CCI-003640

Enforce organization-defined discretionary access control policies over defined subjects and objects where the policy specifies that a subject that has been granted access to information can change security attributes on subjects, objects, the system, or the system's components.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-003640.