Skip to main content

πŸ’Ό AC-24 Access Control Decisions

  • Contextual name: πŸ’Ό AC-24 Access Control Decisions
  • ID: /frameworks/nist-sp-800-53-r5/ac/24
  • Located in: πŸ’Ό AC Access Control

Description​

[Selection: Establish procedures; Implement mechanisms] to ensure [Assignment: organization-defined access control decisions] are applied to each access request prior to access enforcement.

Similar​

  • Internal
    • ID: dec-c-49a7fc7e

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό NIST CSF v2.0 β†’ πŸ’Ό PR.AA-05: Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties58

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό AC-24(1) Access Control Decisions _ Transmit Access Authorization Information
πŸ’Ό AC-24(2) Access Control Decisions _ No User or Process Identity