GRCA Planeth
Niste prijavljeni
Prijava
Početak
Izvori
›
AC-21 Information Sharing
›
Standard - AC-21(01) Automated Decision Support
+AC-21(01) Automated Decision Support
AC-21(01) Automated Decision Support
Control
Employ [Assignement: automated mechanisms] to enforce information-sharing decisions by authorized users based on access authorizations of sharing partners and access restrictions on information to be shared.
Discussion
Automated mechanisms are used to enforce information sharing decisions.
Assessment Objective
[Assignement: automated mechanisms] are employed to enforce information-sharing decisions by authorized users based on access authorizations of sharing partners and access restrictions on information to be shared.
Assessment Method
Examine
Access control policy procedures addressing user-based collaboration and information sharing (including restrictions) system design documentation system configuration settings and associated documentation system-generated list of users authorized to make information-sharing/collaboration decisions system-generated list of sharing partners and access authorizations system-generated list of access restrictions regarding information to be shared system security plan other relevant documents or records
Interview
System/network administrators organizational personnel with information security responsibilities system developers
1. Pregled
Naslov
Standard
1.1 Reference
1.2 Utvrđeni zahtjevi
1.3 Povezani propisi
2. Utvrđeni zahtjevi
Zahtjevi
Izvor
Zahtjev
3. Povezani propisi
Propisi
Izvor
Regulativa
Povezani zadaci
Poveznice
Vrsta poveznice
Zadatak
is blocked by
AC-21(01) Automated Decision Support – Assessment Procedure
is blocked by
Sensitive / Regulated Data Sharing Decisions
is blocked by
Attribute-Based Access Control (ABAC)
NIST
-
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final