organization-defined circumstances or situations requiring re-authentication
A policy parameter placeholder used in risk-based access-control frameworks — specifically the customizable slot within a re-authentication control statement that an organization fills with its own enumerated list of trigger conditions. Organizations are expected to specify events or states that invalidate the assurance level of an existing session, such as role changes, credential updates, escalation to privileged functions, elapsed time thresholds, or changes in system security category. In practice the expression functions as an assignment variable: it signals that the standard body intentionally defers the concrete trigger list to the implementing organization rather than prescribing a universal set, so that the control scales across different risk environments and mission contexts.
Framework senses
- §1 · attested_usage_reviewer_confirmed
- No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.Increment 2: attested in NIST SP 800-171r3 without a glossary definition.
- §1 · web_lookup_draft
- A policy parameter placeholder used in risk-based access-control frameworks — specifically the customizable slot within a re-authentication control statement that an organization fills with its own enumerated list of trigger conditions. Organizations are expected to specify events or states that invalidate the assurance level of an existing session, such as role changes, credential updates, escalation to privileged functions, elapsed time thresholds, or changes in system security category. In practice the expression functions as an assignment variable: it signals that the standard body intentionally defers the concrete trigger list to the implementing organization rather than prescribing a universal set, so that the control scales across different risk environments and mission contexts.Drafted by the propose-term web lookup (PD-018); a curator confirms or replaces it.