AC-16(6): Maintenance Of Attribute Association By Organization

Control Family:

Access Control

CSF v1.1 References:

Baselines:

(Not part of any baseline)

Next Version:

Control Statement

The organization allows personnel to associate, and maintain the association of [Assignment: organization-defined security attributes] with [Assignment: organization-defined subjects and objects] in accordance with [Assignment: organization-defined security policies].

Supplemental Guidance

This control enhancement requires individual users (as opposed to the information system) to maintain associations of security attributes with subjects and objects.