Does NIST Cybersecurity Framework require Access Control?
Yes — 1 provision
Access Control (PR.AA)
"NIST CSF 2.0 names PR.AA as the Identity Management, Authentication, and Access Control category under the Protect function."
Requirements
| Requirement | Details |
|---|---|
| Identity management | Manage identities and credentials for authorized users |
| Access enforcement | Enforce access permissions based on policies |
Sources: NIST CSF 2.0