AC-16(6): Maintenance Of Attribute Association By Organization

Control Family:

Access Control

Parent Control:

AC-16: Security Attributes

Priority:

P0: Security control not selected in any baseline.

CSF v1.1 References:

PR.AC-4
PR.AC-6

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
AC-16(6): Maintenance of Attribute Association

Control Statement

The organization allows personnel to associate, and maintain the association of [Assignment: organization-defined security attributes] with [Assignment: organization-defined subjects and objects] in accordance with [Assignment: organization-defined security policies].

Supplemental Guidance

This control enhancement requires individual users (as opposed to the information system) to maintain associations of security attributes with subjects and objects.