AC-16(2)—Security Attributes
PBMM (P2)
Secret (P2)
Technical
>Control Description
SECURITY ATTRIBUTES | ATTRIBUTE VALUE CHANGES BY AUTHORIZED INDIVIDUALS The information system provides authorized individuals (or processes acting on behalf of individuals) the capability to define or change the value of associated security attributes.
>Supplemental Guidance
The content or assigned values of security attributes can directly affect the ability of individuals to access organizational information. Therefore, it is important for information systems to be able to limit the ability to create or modify security attributes to authorized individuals. Related controls: AC-6, AU-2.
>Tailoring Guidance
Control enhancement (2) and (4) allow authors and other authorized entities to assign security labels to resources.
Ask AI
Configure your API key to use AI features.