Controlled Access Protection
Controlled Access Protection: (C.
Definition
(C. F. D.) Minimum set of security functionality that enforces access control on individual users and makes them accountable for their actions through login procedures, auditing of security-relevant events, and resource isolation. Rationale: Controlled access protection was described in the Controlled Access Protection Profile (CAPP) of October 1999 implementing C2. As the CAPP was superseded by the General Purpose Operating System Profile, the CAPP definition should be deleted.
Alternative Definitions
- Definition 2
Minimum set of security functionality that enforces access control on individual users and makes them accountable for their actions through login procedures, auditing of security-relevant events, and resource isolation. (CNSSI-4009) (NISTIR)