Trace one authority signal through its exact source, normalized catalog, retained method context, and required human decision. The signal stops wherever the record stops.
1,196 catalog units indexedNormalized catalog · SHA-256 bfae171ee609…aaacbcc7.
04
Reference method
3,715 assessment-objective nodes retained · inactive2,931 method parts and 2,931 object parts are preserved for reference; no runnable test set is activated by this catalog reader.
05
Human acceptance
Required · no conclusion recordedThe reference method may prepare a review record. A named reviewer retains conclusion authority.
A later station can exist as configuration without inheriting the authority of an earlier one. Only a connected path carries provenance; only a named reviewer can accept a conclusion.
The server returns at most 50 records per view. Refine the source query or family to inspect the remainder; the full catalog is never shipped to a browser bundle.
Field notebook · source record
AC-3(2)
Access Control
active
Dual Authorization
The statement below is source material, not a generated control summary.
01
Source statement
Enforce dual authorization for {{ insert: param, ac-03.02_odp }}.
02
Guidance
Dual authorization, also known as two-person control, reduces risk related to insider threats. Dual authorization mechanisms require the approval of two authorized individuals to execute. To reduce the risk of collusion, organizations consider rotating dual authorization duties. Organizations consider the risk associated with implementing dual authorization mechanisms when immediate responses are necessary to ensure public and environmental safety.
03
Organization-defined parameters
Organization-defined · unresolvedCatalog reference only. No project value has been assigned or evaluated here.
ac-03.02_odp
privileged commands and/or other actions
Source guidance
privileged commands and/or other actions requiring dual authorization are defined;
04
Assessment reference context
Retained, not activated.1 source assessment records and 1 objective nodes are available as reference context. This surface runs none of them.
ac-3.2_objAC-03(02)1 objective nodes
dual authorization is enforced for {{ insert: param, ac-03.02_odp }}.
05
Reference method and authority
InputExact release, source digest, control ID, and cited source fields
Agent taskPrepare a bounded evidence request or test-plan draft
Fail closedAbstain when source, scope, or assessment identity is missing
Human acceptanceA named reviewer decides whether evidence supports the conclusion