+AC-21(01) Automated Decision Support

AC-21(01) Automated Decision Support

Control

Employ [Assignement: automated mechanisms] to enforce information-sharing decisions by authorized users based on access authorizations of sharing partners and access restrictions on information to be shared.

Discussion

Automated mechanisms are used to enforce information sharing decisions.

Assessment Objective

[Assignement: automated mechanisms] are employed to enforce information-sharing decisions by authorized users based on access authorizations of sharing partners and access restrictions on information to be shared.

Assessment Method

Examine

Access control policy procedures addressing user-based collaboration and information sharing (including restrictions) system design documentation system configuration settings and associated documentation system-generated list of users authorized to make information-sharing/collaboration decisions system-generated list of sharing partners and access authorizations system-generated list of access restrictions regarding information to be shared system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities system developers

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by AC-21(01) Automated Decision Support – Assessment Procedure
is blocked by Sensitive / Regulated Data Sharing Decisions
is blocked by Attribute-Based Access Control (ABAC)