Definitions

Definition 1

Related Terms

• Access Control Mechanism (Dictionary Entry)

• Access Control Model (Dictionary Entry)

Quotes

Access control policies are high-level requirements that specify how access is managed and who, under what circumstances, may access what information. While access control policies can be application-specific and thus taken into consideration by the application vendor, policies are just as likely to pertain to user actions within the context of an organizational unit or across organizational boundaries. For instance, policies may pertain to resource usage within or across organizational units or may be based on need-to-know, competence, authority, obligation, or conflict-of-interest factors. Such policies may span multiple computing platforms and applications.

Bibliography

• NIST IR 7316, 2006

See Also