|
control enhancementAC-24(2)
No User or Process Identity (AC-24(2))
Enforce access control decisions based on [organization-defined] that do not include the identity of the user or process acting on behalf of the user.
access-controlauthorizationleast-privilegeenhancement
Why These Connect
Enhances1
These enhancements add specific capabilities or refinements to the base control.