id: "AC-21(02)" title: "Information Search and Retrieval" family: "AC" family_name: "Access Control" sort_id: "ac-21.02" priority: "P1" implementation_level: "system" parent: "AC-21" enhancement: True
Statement
Implement information search and retrieval services that enforce {{ insert: param, ac-21.02_odp }}.
Guidance
Information search and retrieval services identify information system resources relevant to an information need.
Assessment Objective
information search and retrieval services that enforce {{ insert: param, ac-21.02_odp }} are implemented.
Access control policy
procedures addressing user-based collaboration and information sharing (including restrictions)
system design documentation
system configuration settings and associated documentation
system-generated list of access restrictions regarding information to be shared
information search and retrieval records
system audit records
system security plan
other relevant documents or records
Organizational personnel with access enforcement responsibilities for system search and retrieval services
system/network administrators
organizational personnel with information security responsibilities
system developers
System search and retrieval services enforcing information-sharing restrictions