Trace one authority signal through its exact source, normalized catalog, retained method context, and required human decision. The signal stops wherever the record stops.
1,196 catalog units indexedNormalized catalog · SHA-256 bfae171ee609…aaacbcc7.
04
Reference method
3,715 assessment-objective nodes retained · inactive2,931 method parts and 2,931 object parts are preserved for reference; no runnable test set is activated by this catalog reader.
05
Human acceptance
Required · no conclusion recordedThe reference method may prepare a review record. A named reviewer retains conclusion authority.
A later station can exist as configuration without inheriting the authority of an earlier one. Only a connected path carries provenance; only a named reviewer can accept a conclusion.
The server returns at most 50 records per view. Refine the source query or family to inspect the remainder; the full catalog is never shipped to a browser bundle.
Field notebook · source record
AC-3
Access Control
active
Access Enforcement
The statement below is source material, not a generated control summary.
01
Source statement
Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.
02
Guidance
Access control policies control access between active entities or subjects (i.e., users or processes acting on behalf of users) and passive entities or objects (i.e., devices, files, records, domains) in organizational systems. In addition to enforcing authorized access at the system level and recognizing that systems can host many applications and services in support of mission and business functions, access enforcement mechanisms can also be employed at the application and service level to provide increased information security and privacy. In contrast to logical access controls that are implemented within the system, physical access controls are addressed by the controls in the Physical and Environmental Protection ( [PE](#pe) ) family.
03
Organization-defined parameters
No organization-defined parameters on this unit.
04
Assessment reference context
Retained, not activated.1 source assessment records and 1 objective nodes are available as reference context. This surface runs none of them.
ac-3_objAC-031 objective nodes
approved authorizations for logical access to information and system resources are enforced in accordance with applicable access control policies.
05
Reference method and authority
InputExact release, source digest, control ID, and cited source fields
Agent taskPrepare a bounded evidence request or test-plan draft
Fail closedAbstain when source, scope, or assessment identity is missing
Human acceptanceA named reviewer decides whether evidence supports the conclusion