Provide authorized individuals (or processes acting on behalf of individuals) the capability to define or change the value of associated security and privacy attributes.
|
|
| Control Identifier | AC-16(2) |
| Latest Sync Date | 19/12/24 09:18:14 |
| Discussion | The content or assigned values of attributes can directly affect the ability of individuals to access organizational information. Therefore, it is important for systems to be able to limit the ability to create or modify attributes to authorized individuals. |
| Related Controls | None. |