GRCA Planeth
Jūs neprisijungę
Prisijungti
Pradžia
Šaltiniai
›
AC-21 Information Sharing
›
Standard - AC-21(01) Automated Decision Support
+AC-21(01) Automated Decision Support
AC-21(01) Automated Decision Support
Control
Employ [Assignement: automated mechanisms] to enforce information-sharing decisions by authorized users based on access authorizations of sharing partners and access restrictions on information to be shared.
Discussion
Automated mechanisms are used to enforce information sharing decisions.
Assessment Objective
[Assignement: automated mechanisms] are employed to enforce information-sharing decisions by authorized users based on access authorizations of sharing partners and access restrictions on information to be shared.
Assessment Method
Examine
Access control policy procedures addressing user-based collaboration and information sharing (including restrictions) system design documentation system configuration settings and associated documentation system-generated list of users authorized to make information-sharing/collaboration decisions system-generated list of sharing partners and access authorizations system-generated list of access restrictions regarding information to be shared system security plan other relevant documents or records
Interview
System/network administrators organizational personnel with information security responsibilities system developers
1. Apžvalga
Pavadinimas
Standartas
1.1 Nuorodos
1.2 Nustatyti reikalavimai
1.3 Susiję teisės aktai
2. Nustatyti reikalavimai
Reikalavimai
Šaltinis
Reikalavimas
3. Susiję teisės aktai
Teisės aktai
Šaltinis
Reguliavimas
Susietos užduotys
Saitai
Saito tipas
Užduotis
is blocked by
AC-21(01) Automated Decision Support – Assessment Procedure
is blocked by
Sensitive / Regulated Data Sharing Decisions
is blocked by
Attribute-Based Access Control (ABAC)
NIST
-
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final