AC-16(6)

Requirement

Require personnel to associate and maintain the association of [Assignment: organization-defined security and privacy attributes] with [Assignment: organization-defined subjects and objects] in accordance with [Assignment: organization-defined security and privacy policies].

Discussion

Maintaining attribute association requires individual users (as opposed to the system) to maintain associations of defined security and privacy attributes with subjects and objects.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Access control policy; procedures addressing association of security and privacy attributes with subjects and objects; system security plan; privacy plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with responsibilities for associating and maintaining association of security and privacy attributes with subjects and objects; organizational personnel with information security and privacy responsibilities; system developers].

Test

[SELECT FROM: Mechanisms supporting associations of security and privacy attributes to subjects and objects].

ID	Assessment Objectives
AC-16(06)[01]	personnel are required to associate and maintain the association of <AC-16(06)_ODP[01] security attributes> with <AC-16(06)_ODP[05] subjects> in accordance with <AC-16(06)_ODP[09] security policies>;
AC-16(06)[02]	personnel are required to associate and maintain the association of <AC-16(06)_ODP[02] security attributes> with <AC-16(06)_ODP[06] objects> in accordance with <AC-16(06)_ODP[09] security policies>;
AC-16(06)[03]	personnel are required to associate and maintain the association of <AC-16(06)_ODP[03] privacy attributes> with <AC-16(06)_ODP[07] subjects> in accordance with <AC-16(06)_ODP[10] privacy policies>;
AC-16(06)[04]	personnel are required to associate and maintain the association of <AC-16(06)_ODP[04] privacy attributes> with <AC-16(06)_ODP[08] objects> in accordance with <AC-16(06)_ODP[10] privacy policies>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!