NIST 800-53 rev.5/Access Control/100 of 1011
AC-16 (10)Security and Privacy Attributes | Attribute Configuration by Authorized Individuals
Control family: Access Control
Control description
Provide authorized individuals the capability to define or change the type and value of security and privacy attributes available for association with subjects and objects.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.