AC-3(7)_role-based-access-control
Enforce a role-based access control policy over defined subjects and objects and control access based upon [organization-defined].
☆1.21k repo stars⑂201 repo forks
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
AC-3(8)_revocation-of-access-authorizations
Enforce the revocation of access authorizations resulting from changes to the security attributes of subjects and objects based on [organization-defin
☆1.21k repo stars⑂201 repo forks
DevOps & Security
AC-3(9)_controlled-release
Release information outside of the system only if: The receiving [organization-defined] provides [organization-defined] ; and [organization-defined] a
☆1.21k repo stars⑂201 repo forks
DevOps & Security
AC-3_access-enforcement
Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
AC-4(1)_object-security-and-privacy-attributes
Use [organization-defined] associated with [organization-defined] to enforce [organization-defined] as a basis for flow control decisions.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
AC-4(10)_enable-and-disable-security-or-privacy-policy-filters
Provide the capability for privileged administrators to enable and disable [organization-defined] under the following conditions: [organization-define
☆1.21k repo stars⑂201 repo forks
DevOps & Security
AC-4(11)_configuration-of-security-or-privacy-policy-filters
Provide the capability for privileged administrators to configure [organization-defined] to support different security or privacy policies.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
AC-4(12)_data-type-identifiers
When transferring information between different security domains, use [organization-defined] to validate data essential for information flow decisions
☆1.21k repo stars⑂201 repo forks
DevOps & Security
AC-4(14)_security-or-privacy-policy-filter-constraints
When transferring information between different security domains, implement [organization-defined] requiring fully enumerated formats that restrict da
☆1.21k repo stars⑂201 repo forks
DevOps & Security
AC-4(15)_detection-of-unsanctioned-information
When transferring information between different security domains, examine the information for the presence of [organization-defined] and prohibit the
☆1.21k repo stars⑂201 repo forks
DevOps & Security