CyberStrikeus/CyberStrike - Page 117

ac-21-1-automated-decision-support

Employ [organization-defined] to enforce information-sharing decisions by authorized users based on access authorizations of sharing partners and acce

ac-21-2-information-search-and-retrieval

Implement information search and retrieval services that enforce [organization-defined].

ac-21-information-sharing

Enable authorized users to determine whether access authorizations assigned to a sharing partner match the information’s access and use restriction...

ac-22-publicly-accessible-content

Designate individuals authorized to make information publicly accessible;

ac-23-data-mining-protection

Employ [organization-defined] for [organization-defined] to detect and protect against unauthorized data mining.

ac-24-1-transmit-access-authorization-information

Transmit [organization-defined] using [organization-defined] to [organization-defined] that enforce access control decisions.

ac-24-2-no-user-or-process-identity

Enforce access control decisions based on [organization-defined] that do not include the identity of the user or process acting on behalf of the user.

ac-24-access-control-decisions

[organization-defined] to ensure [organization-defined] are applied to each access request prior to access enforcement.

ac-25-reference-monitor

Implement a reference monitor for [organization-defined] that is tamperproof, always invoked, and small enough to be subject to analysis and testing,

ac-3-1-restricted-access-to-privileged-functions

Restricted Access to Privileged Functions

ac-3-10-audited-override-of-access-control-mechanisms

Employ an audited override of automated access control mechanisms under [organization-defined] by [organization-defined].

ac-3-11-restrict-access-to-specific-information-types

Restrict access to data repositories containing [organization-defined].

ac-3-12-assert-and-enforce-application-access

Require applications to assert, as part of the installation process, the access needed to the following system applications and functions: [organiz...

ac-3-13-attribute-based-access-control

Enforce attribute-based access control policy over defined subjects and objects and control access based upon [organization-defined].

ac-3-14-individual-access

Provide [organization-defined] to enable individuals to have access to the following elements of their personally identifiable information: [organizat

ac-3-15-discretionary-and-mandatory-access-control

Enforce [organization-defined] over the set of covered subjects and objects specified in the policy;

ac-3-2-dual-authorization

Enforce dual authorization for [organization-defined].

ac-3-3-mandatory-access-control

Enforce [organization-defined] over the set of covered subjects and objects specified in the policy, and where the policy: Is uniformly enforced acros

ac-3-4-discretionary-access-control

Enforce [organization-defined] over the set of covered subjects and objects specified in the policy, and where the policy specifies that a subject tha

ac-3-5-security-relevant-information

Prevent access to [organization-defined] except during secure, non-operable system states.

ac-3-6-protection-of-user-and-system-information

Protection of User and System Information

ac-3-7-role-based-access-control

Enforce a role-based access control policy over defined subjects and objects and control access based upon [organization-defined].

ac-3-8-revocation-of-access-authorizations

Enforce the revocation of access authorizations resulting from changes to the security attributes of subjects and objects based on [organization-defin

ac-3-9-controlled-release

Release information outside of the system only if: The receiving [organization-defined] provides [organization-defined] ; and [organization-defined] a

ac-3-access-enforcement

Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

ac-4-1-object-security-and-privacy-attributes

Use [organization-defined] associated with [organization-defined] to enforce [organization-defined] as a basis for flow control decisions.

ac-4-10-enable-and-disable-security-or-privacy-policy-filters

Provide the capability for privileged administrators to enable and disable [organization-defined] under the following conditions: [organization-define

ac-4-11-configuration-of-security-or-privacy-policy-filters

Provide the capability for privileged administrators to configure [organization-defined] to support different security or privacy policies.

ac-4-12-data-type-identifiers

When transferring information between different security domains, use [organization-defined] to validate data essential for information flow decisions

ac-4-13-decomposition-into-policy-relevant-subcomponents

When transferring information between different security domains, decompose information into [organization-defined] for submission to policy enforceme

ac-4-14-security-or-privacy-policy-filter-constraints

When transferring information between different security domains, implement [organization-defined] requiring fully enumerated formats that restrict da

ac-4-15-detection-of-unsanctioned-information

When transferring information between different security domains, examine the information for the presence of [organization-defined] and prohibit the

ac-4-16-information-transfers-on-interconnected-systems

Information Transfers on Interconnected Systems

ac-4-17-domain-authentication

Uniquely identify and authenticate source and destination points by [organization-defined] for information transfer.

ac-4-18-security-attribute-binding

Security Attribute Binding

ac-4-19-validation-of-metadata

When transferring information between different security domains, implement [organization-defined] on metadata.

ac-4-2-processing-domains

Use protected processing domains to enforce [organization-defined] as a basis for flow control decisions.

ac-4-20-approved-solutions

Employ [organization-defined] to control the flow of [organization-defined] across security domains.

ac-4-21-physical-or-logical-separation-of-information-flows

Separate information flows logically or physically using [organization-defined] to accomplish [organization-defined].

ac-4-22-access-only

Provide access from a single device to computing platforms, applications, or data residing in multiple different security domains, while preventing in