An error occurred:

CCIs

Number Definition Status Related
CCI-003632 Activate organization-defined system accounts dynamically. Draft
CCI-003633 Defines the system accounts that can be dynamically managed. Draft
CCI-003634 Manage organization-defined system accounts dynamically. Draft
CCI-003635 Defines the system accounts that can be dynamically deactivated. Draft
CCI-003636 Deactivate organization-defined system accounts dynamically. Draft
CCI-003637 Defines the significant risks that may be discovered requiring disabled accounts of individuals. Draft
CCI-003638 Enforce organization-defined discretionary access control policies over defined subjects and objects where the policy specifies that a subject that has been granted access to information can pass the information to any other subjects or objects. Draft
CCI-003639 Enforce organization-defined discretionary access control policies over defined subjects and objects where the policy specifies that a subject that has been granted access to information can grant its privileges to other subjects. Draft
CCI-003640 Enforce organization-defined discretionary access control policies over defined subjects and objects where the policy specifies that a subject that has been granted access to information can change security attributes on subjects, objects, the system, or the system's components. Draft
CCI-003641 Enforce organization-defined discretionary access control policies over defined subjects and objects where the policy specifies that a subject that has been granted access to information can choose the security attributes to be associated with newly created or revised objects. Draft
CCI-003642 Enforce organization-defined discretionary access control policies over defined subjects and objects where the policy specifies that a subject that has been granted access to information can change the rules governing access control. Draft
CCI-003643 Defines the organization-defined roles for which it will employ an audited override of automated access control mechanisms. Draft
CCI-003644 Restrict direct access to data repositories containing organization-defined information types. Draft
CCI-003645 Defines the information types of which to restrict direct access to data repositories. Draft
CCI-003646 Require applications to assert, as part of the installation process, the access needed to the organization-defined system applications and functions. Draft
CCI-003647 Defines the organization-defined system applications and functions as required of the applications as part of the installation process. Draft
CCI-003648 Require applications to provide an enforcement mechanism to prevent other-than-asserted access. Draft
CCI-003649 Approve access changed after initial installations of the application. Draft
CCI-003650 Enforce attribute-based access control policy over defined subjects and objects based upon organization-defined attributes to assume access permissions. Draft
CCI-003651 Defines the attributes to assume access permissions for enforcing attribute-based access control policy. Draft
CCI-003652 Enforce attribute-based control access over defined subjects and objects based upon organization-defined attributes to assume access permissions. Draft
CCI-003653 Defines the attributes to assume access permissions for enforcing attribute-based control access. Draft
CCI-003654 Provide organization-defined mechanisms to enable individuals to have access to the following elements of their personally identifiable information: organization-defined elements. Draft
CCI-003655 Defines the mechanisms to be provided for access to elements of personally identifiable information. Draft
CCI-003656 Defines the elements of personally identifiable information. Draft
CCI-003657 Enforce organization-defined mandatory access control policy over the set of covered subjects and objects specified in the policy. Draft
CCI-003658 Defines the mandatory access control policies that are to be enforced over all subjects and objects. Deprecated
CCI-003659 Enforce organization-defined discretionary access control policy over the set of covered subjects and objects specified in the policy. Draft
CCI-003660 Defines the discretionary access control policies the system is to enforce over subjects and objects. Draft
CCI-003661 Defines the privacy attributes to be used to enforce organization-defined information flow control policies. Draft