CCI-003642

Definition

Enforce organization-defined discretionary access control policies over defined subjects and objects where the policy specifies that a subject that has been granted access to information can change the rules governing access control.

Parent Control

AC-3 (4)Access EnforcementAccess Control

Linked STIG Checks (3)

V-272627CAT IIICylanceON-PREM must be configured to use a third-party identity provider.Arctic Wolf CylanceON-PREM Security Technical Implementation Guide V-276005CAT IIAx-OS must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.Axonius Federal Systems Ax-OS Security Technical Implementation Guide V-269581CAT IIXylok Security Suite must not allow local user or groups.Xylok Security Suite 20.x Security Technical Implementation Guide