💼 AC-24(2) Access Control Decisions | No User or Process Identity

• ID: /frameworks/nist-sp-800-53-r5/ac/24/02

Description

Enforce access control decisions based on [Assignment: organization-defined security or privacy attributes] that do not include the identity of the user or process acting on behalf of the user.

Similar

• Internal
  • ID: dec-c-dd534c63

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance