NIST SP 800-53 Rev. 5
AC-16
Access Control

Security and Privacy Attributes

Description

a. Provide the means to associate [organization-defined parameter] with [organization-defined parameter] for information in storage, in process, and/or in transmission; b. Ensure that the attribute associations are made and retained with the information; c. Establish the following permitted security and privacy attributes from the attributes defined in [AC-16a](#ac-16_smt.a) for [organization-defined parameter]: [organization-defined parameter]; d. Determine the following permitted attribute values or ranges for each of the established attributes: [organization-defined parameter]; e. Audit changes to attributes; and f. Review [organization-defined parameter] for applicability [organization-defined parameter].

Mapped SPARTA techniques

67 techniques

Cite as SafeMode Space, nist-80053-rev5 AC-16.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.