D3-AMED

Isolate
Access Mediation

Definition

Access mediation is the process of granting or denying specific requests to: 1) obtain and use information and related information processing services; and 2) enter specific physical facilities (e.g., Federal buildings, military establishments, border crossing entrances). Access mediation decisions should enforce least privilege by granting access for scoped durations to prevent privilege creep and, where applicable, implement just-in-time (JIT) access. Denial decisions may prevent initial access or terminate access that has already been granted, ensuring continuous enforcement of security policies.

Artifact Relationships

This defensive technique relates to specific digital artifacts.

isolates
isolates
filters
filters
restricts
limits
filters
isolates
isolates
restricts
isolates
isolates
isolates
Access Mediation
Network
I/O Module
Input Device
Removable Media Device
OT Controller Operating Mode
OT Logic Variable
System Call
Process
Service Application Process
OT Write Command
Credential
Network Resource
File

References

Reference - Committee on National Security Systems (CNSS) Glossary