home/dictionary/Identity-Based Security Policy

Identity-Based Security Policy

nouncandidate·updated May 9, 2026

A security policy based on the identities and/or attributes of the object (system resource) being accessed and of the subject (user, group of users, process, or device) requesting access.

Framework senses

NISTIR 7298: Glossary of Key Information Security Terms, Revision 21 senseview framework →
§1
A security policy based on the identities and/or attributes of the object (system resource) being accessed and of the subject (user, group of users, process, or device) requesting access.
NIST SP 800-331 senseview framework →
§1
A security policy based on the identities and/or attributes of the object (system resource) being accessed and of the subject (user, group of users, process, or device) requesting access.