home/glossary/Identity-Based Security Policy

Identity-Based Security Policy

nounid 2779·updated May 9, 2026
candidate

A security policy based on the identities and/or attributes of the object (system resource) being accessed and of the subject (user, group of users, process, or device) requesting access.

MWE

Classifications

Entity Type

Requirement90%rule-basedr:entity.requirement.policy.v1

Sensitivity

unclassified

Information Class

unclassified

Variants

plural
Identity-Based Security Policies
possessive
Identity-Based Security Policy's
pluralpossessive
Identity-Based Security Policies'

Framework definitions

NISTIR 7298: Glossary of Key Information Security Terms, Revision 21 senseview framework →
§1
A security policy based on the identities and/or attributes of the object (system resource) being accessed and of the subject (user, group of users, process, or device) requesting access.
NIST SP 800-331 senseview framework →
§1
A security policy based on the identities and/or attributes of the object (system resource) being accessed and of the subject (user, group of users, process, or device) requesting access.

Outgoing relationships

No outgoing triples
This term is not the subject of any RDF-style relationship yet.

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.