Skip to content

AC-21: Information Sharing

An OSCAL Control

    • information-sharing circumstances

      information-sharing circumstances where user discretion is required to determine whether access authorizations assigned to a sharing partner match the information’s access and use restrictions are defined;

    • automated mechanisms

      automated mechanisms or manual processes that assist users in making information-sharing and collaboration decisions are defined;