id: "AC-16(06)" title: "Maintenance of Attribute Association" family: "AC" family_name: "Access Control" sort_id: "ac-16.06" priority: "P1" implementation_level: "organization" parent: "AC-16" enhancement: True
Statement
Require personnel to associate and maintain the association of {{ insert: param, ac-16.6_prm_1 }} with {{ insert: param, ac-16.6_prm_2 }} in accordance with {{ insert: param, ac-16.6_prm_3 }}.
Guidance
Maintaining attribute association requires individual users (as opposed to the system) to maintain associations of defined security and privacy attributes with subjects and objects.
Assessment Objective: personnel are required to associate and maintain the association of {{ insert: param, ac-16.06_odp.01 }} with {{ insert: param, ac-16.06_odp.05 }} in accordance with {{ insert: param, ac-16.06_odp.09 }};
Assessment Objective: personnel are required to associate and maintain the association of {{ insert: param, ac-16.06_odp.02 }} with {{ insert: param, ac-16.06_odp.06 }} in accordance with {{ insert: param, ac-16.06_odp.09 }};
Assessment Objective: personnel are required to associate and maintain the association of {{ insert: param, ac-16.06_odp.03 }} with {{ insert: param, ac-16.06_odp.07 }} in accordance with {{ insert: param, ac-16.06_odp.10 }};
Assessment Objective: personnel are required to associate and maintain the association of {{ insert: param, ac-16.06_odp.04 }} with {{ insert: param, ac-16.06_odp.08 }} in accordance with {{ insert: param, ac-16.06_odp.10 }}.
Access control policy
procedures addressing association of security and privacy attributes with subjects and objects
system security plan
privacy plan
other relevant documents or records
Organizational personnel with responsibilities for associating and maintaining association of security and privacy attributes with subjects and objects
organizational personnel with information security and privacy responsibilities
system developers
Mechanisms supporting associations of security and privacy attributes to subjects and objects