NIST SP 800-53 Rev. 5
AC-3(3)
Access Control
enhancement

Mandatory Access Control

Parent: AC-3

Description

Enforce [organization-defined parameter] over the set of covered subjects and objects specified in the policy, and where the policy: a. Is uniformly enforced across the covered subjects and objects within the system; b. Specifies that a subject that has been granted access to information is constrained from doing any of the following; c. Specifies that [organization-defined parameter] may explicitly be granted [organization-defined parameter] such that they are not limited by any defined subset (or all) of the above constraints.

Mapped SPARTA techniques

15 techniques

Cite as SafeMode Space, nist-80053-rev5 AC-3(3).

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.