AC-16(01) Dynamic Attribute Association

Dynamically associate security and privacy attributes with ac-16.1_prm_1 in accordance with the following security and privacy policies as information is created and combined: ac-16.1_prm_2.

Parameter ID Definition
ac-16.1_prm_1 organization-defined subjects and objects
ac-16.1_prm_2 organization-defined security and privacy policies
ac-16.01_odp.01 subjects
ac-16.01_odp.02 objects
ac-16.01_odp.03 subjects
ac-16.01_odp.04 objects
ac-16.01_odp.05 security policies
ac-16.01_odp.06 privacy policies

Baselines

Guidance

Dynamic association of attributes is appropriate whenever the security or privacy characteristics of information change over time. Attributes may change due to information aggregation issues (i.e., characteristics of individual data elements are different from the combined elements), changes in individual access authorizations (i.e., privileges), changes in the security category of information, or changes in security or privacy policies. Attributes may also change situationally.