Latest revision as of 00:24, 20 January 2026

DAC

An access control policy that is enforced over all subjects and objects in an information system where the policy specifies that a subject that has been granted access to information can do one or more of the following: (i) pass the information to other subjects or objects; (ii) grant its privileges to other subjects; (iii) change security attributes on subjects, objects, information systems, or system components; (iv) choose the security attributes to be associated with newly-created or revised objects; or (v) change the rules governing access control. Mandatory access controls restrict this capability.

Source: NIST SP 800-53 Rev. 4 | Category:

Revision as of 00:12, 15 January 2026 view source imported>Unknown user No edit summary		Latest revision as of 00:24, 20 January 2026 view source imported>Unknown user No edit summary
(2 intermediate revisions by the same user not shown)
(No difference)