NIST SP 800-53

NIST SP 800-53 – AC-4(7) – Information Flow Enforcement | One-way Flow Mechanisms
Control(s) Enforce one-way information flows through hardware-based flow control mechanisms. Additional Details (Discussion) One-way flow mechanisms may also be referred...
NIST SP 800-53 – AC-3(8) – Access Enforcement | Revocation of Access Authorizations
Control(s) Enforce the revocation of access authorizations resulting from changes to the security attributes of subjects and objects based on...
NIST SP 800-53 – AC-4(8) – Information Flow Enforcement | Security and Privacy Policy Filters
Control(s) (a) Enforce information flow control using [Assignment: organization-defined security or privacy policy filters] as a basis for flow control...
NIST SP 800-53 – AC-3(9) – Access Enforcement | Controlled Release
Control(s) Release information outside of the system only if: (a) The receiving [Assignment: organization-defined system or system component] provides [Assignment:...
NIST SP 800-53 – AC-3(10) – Access Enforcement | Audited Override of Access Control Mechanisms
Control(s) Employ an audited override of automated access control mechanisms under [Assignment: organization-defined conditions] by [Assignment: organization-defined roles]. Additional Details...
NIST SP 800-53 – AC-3(11) – Access Enforcement | Restrict Access to Specific Information Types
Control(s) Restrict access to data repositories containing [Assignment: organization-defined information types]. Additional Details (Discussion) Restricting access to specific information is...
NIST SP 800-53 – AC-3(12) – Access Enforcement | Assert and Enforce Application Access
Control(s) (a) Require applications to assert, as part of the installation process, the access needed to the following system applications...
NIST SP 800-53 – AC-3(13) – Access Enforcement | Attribute-based Access Control
Control(s) Enforce attribute-based access control policy over defined subjects and objects and control access based upon [Assignment: organization-defined attributes to...
NIST SP 800-53 – AC-3(14) – Access Enforcement | Individual Access
Control(s) Provide [Assignment: organization-defined mechanisms] to enable individuals to have access to the following elements of their personally identifiable information:...
NIST SP 800-53 – AC-3(15) – Access Enforcement | Discretionary and Mandatory Access Control
Control(s) (a) Enforce [Assignment: organization-defined mandatory access control policy] over the set of covered subjects and objects specified in the...