CCI-003641

Enforce organization-defined discretionary access control policies over defined subjects and objects where the policy specifies that a subject that has been granted access to information can choose the security attributes to be associated with newly created or revised objects.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-003641.