Assert and Enforce Application Access (AC-3(12))

Require applications to assert, as part of the installation process, the access needed to the following system applications and functions: [organization-defined]; Provide an enforcement mechanism to prevent unauthorized access; and Approve access changes after initial installation of the application.