home/glossary/Rule-Based Security Policy

Rule-Based Security Policy

nounverified·updated May 9, 2026

A security policy based on global rules imposed for all subjects. These rules usually rely on a comparison of the sensitivity of the objects being accessed and the possession of corresponding attributes by the subjects requesting access. Also known as discretionary access control (DAC).

polysemousMWENISTIR 7298: Glossary of Key Information Security Terms, Revision 2

Senses

NISTIR 7298: Glossary of Key Information Security Terms, Revision 2

A security policy based on global rules imposed for all subjects. These rules usually rely on a comparison of the sensitivity of the objects being accessed and the possession of corresponding attributes by the subjects requesting access.

Classifications

Entity Type

Requirement90%rule-basedr:entity.requirement.policy.v1
?unassignedlast reviewed

Sensitivity

unclassified

Information Class

unclassified

Variants

plural
Rule-Based Security Policies
possessive
Rule-Based Security Policy's
pluralpossessive
Rule-Based Security Policies'