IAC-29
Attribute-Based Access Control (ABAC)
Description
Mechanisms exist to enforce Attribute-Based Access Control (ABAC) for policy-driven, dynamic authorizations that supports the secure sharing of information.
Control Question
Does the organization enforce Attribute-Based Access Control (ABAC) for policy-driven, dynamic authorizations that supports the secure sharing of information?
Control Metadata
Domain:
Identification & Authentication
Validation Cadence:
Annual