ComplianceNIST 800-53 enhancement

NIST-AC-16(5) Attribute Displays on Objects to Be Output

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
AC Access Control
Control
AC-16(5)

Control statement

Display security and privacy attributes in human-readable form on each object that the system transmits to output devices to identify [Assignment: instructions] using [Assignment: naming conventions].

Discussion

System outputs include printed pages, screens, or equivalent items. System output devices include printers, notebook computers, video displays, smart phones, and tablets. To mitigate the risk of unauthorized exposure of information (e.g., shoulder surfing), the outputs display full attribute values when unmasked by the subscriber.

Related

Enhancement of · Compliance (1)

  • NIST-AC-16 Security and Privacy Attributes NIST 800-53 control