CCI-003642

Enforce organization-defined discretionary access control policies over defined subjects and objects where the policy specifies that a subject that has been granted access to information can change the rules governing access control.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-003642.