3.4—3.4

>Control Description

DoD establishes a standardized resource authorization gateway for authorizations via the CI/CD pipelines in a risk approach that reviews the User, Device and Data security posture. Authorizations utilize a programmatic (e.g., Software Defined) approach in a live/production environment. Attributes are enriched utilizing other pillar activities and the API and Authorization gateway. Approved enterprise APIs are micro- segmented using authorizations.

>Cross-Framework Mappings

SCF

TDA-23

Compare

Ask AI

Configure your API key to use AI features.