---

id: "AC-21(01)" title: "Automated Decision Support" family: "AC" family_name: "Access Control" sort_id: "ac-21.01" priority: "P1" implementation_level: "system" parent: "AC-21" enhancement: True

---

Statement

Employ {{ insert: param, ac-21.01_odp }} to enforce information-sharing decisions by authorized users based on access authorizations of sharing partners and access restrictions on information to be shared.

Guidance

Automated mechanisms are used to enforce information sharing decisions.

Assessment Objective

{{ insert: param, ac-21.01_odp }} are employed to enforce information-sharing decisions by authorized users based on access authorizations of sharing partners and access restrictions on information to be shared.

Access control policy

procedures addressing user-based collaboration and information sharing (including restrictions)

system design documentation

system configuration settings and associated documentation

system-generated list of users authorized to make information-sharing/collaboration decisions

system-generated list of sharing partners and access authorizations

system-generated list of access restrictions regarding information to be shared

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

system developers

Automated mechanisms implementing access authorizations supporting information-sharing/user collaboration decisions