Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue

AC: Access control – Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue

Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue AC-25: AC-25 Reference monitor

The organisation implements, for defined access control policies, a reference monitor that is tamper-proof, always invoked, and small enough to be analysed and tested so its completeness can be assured. No enhancements.

Maintained by Gerard Blokdyk

Other controls in AC: Access control – Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue

AC-01 AC-01 Access control policy and procedures
AC-02 AC-02 Account management
AC-03 AC-03 Access enforcement
AC-04 AC-04 Information flow enforcement
AC-05 AC-05 Separation of duties
AC-06 AC-06 Least privilege
AC-07 AC-07 Unsuccessful logon attempts
AC-08 AC-08 System use notification

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue controls