home/glossary/Rule-Based Security Policy

Rule-Based Security Policy

nouncandidate·updated May 9, 2026

A security policy based on global rules imposed for all subjects. These rules usually rely on a comparison of the sensitivity of the objects being accessed and the possession of corresponding attributes by the subjects requesting access. Also known as discretionary access control (DAC).

polysemousMWE

Classifications

Entity Type

Requirement90%rule-basedr:entity.requirement.policy.v1
?unassignedlast reviewed

Sensitivity

unclassified

Information Class

unclassified

Variants

plural
Rule-Based Security Policies
possessive
Rule-Based Security Policy's
pluralpossessive
Rule-Based Security Policies'