Skip to content

Access Control List

What is Access Control List?

A list of rules that specifies which users or system processes are granted access to objects, as well as what operations are allowed on given objects.

Information Security

Frameworks that govern access control list

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on access control list

Requirements naming access control list across 6 standards, quoted from the control text.

BRCGS Global Standard for Food Safety Issue 91 control

Configure data access control lists based on a user's need to know. Apply ACLs on file systems, databases, and applications.

3.3 · Configure Data Access Control Lists →
CIS Controls v81 control

Configure data access control lists based on a user’s need to know. Apply data access control lists, also known as access permissions, to local and remote file systems, databases, and applications.

CIS-3.3 · Configure Data Access Control Lists →
NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements1 control

Configure data access control lists based on a user's need to know. Apply ACLs on file systems, databases, and applications.

3.3 · Configure Data Access Control Lists →
ITU-T X.805 - Security Architecture for End-to-End Communications1 control

Security Dimension 1 Access Control per X.805 Clause 6.1: Access Control protects against unauthorized use of network resources. Access Control ensures that only authorized personnel or devices are allowed access to network elements + stored information + info...

X805-Dim1-Access-Control-RBAC-Authorization-Resources-Network-Elements-Services-Applications · ITU-T X.805 Security Dimension 1 - Access Control + Role-Based Access Control (RBAC) + Authorization + Resources + Network Elements + Services + Applications + Access Limitations + Authorized Personnel + Discretionary + Mandatory Access Control →
Lloyd's Minimum Standards - Cyber Security1 control

Lloyds MS11.6 Secure Configuration and Change Management - configuration baselines aligned with industry benchmarks (CIS Critical Security Controls v8 + CIS Benchmarks for Windows + Linux + cloud + container + DISA STIGs where applicable) + Infrastructure-as-C...

LLOYDS-MS11-Secure-Configuration-Change-Management-Network-Segmentation-Perimeter-Defence-MS11-6-15 · Lloyds MS11 Secure Configuration + Change + Network Segmentation + Perimeter + MS11.6-15 →
NIST SP 1800-321 control

Segment DER operational networks from corporate IT networks and from public networks using firewalls, VLANs, and access control lists.

DER-PR-03 · Network Segmentation for DER Operations →

Questions people ask about access control list

What is Access Control List?
A list of rules that specifies which users or system processes are granted access to objects, as well as what operations are allowed on given objects.
Why is Access Control List important for compliance?
Access Control List is a key concept in Information Security. Understanding access control list helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Access Control List?
Access Control List appears in the requirement text of BRCGS Global Standard for Food Safety Issue 9, CIS Controls v8, NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements, ITU-T X.805 - Security Architecture for End-to-End Communications, Lloyd's Minimum Standards - Cyber Security. Across these standards we have identified 6 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Access Control List?
Explore our compliance framework pages to see how access control list applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Access Control List applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.