Authorisation
What is Authorisation?
The process of determining what actions an authenticated user or system is permitted to perform. Typically enforced through access control lists or role-based access control.
Related terms
Frameworks that govern authorisation
What the standards actually require on authorisation
Requirements naming authorisation across 6 standards, quoted from the control text.
If an authorisation to disclose CDR data to an accredited person is withdrawn or otherwise expires, the data holder must notify the accredited person in accordance with the data standards (civil penalty).
competition-and-consumer-consumer-data-right-rules-2020::4.26A · Rule 4.26A: notify the accredited person when an authorisation is withdrawn or expires →Agencies must ensure that what each system user is authorised to do is enforced through access controls.
new-zealand-information-security-manual-nzism::16.2.4.C.01/CID1924 · 16.2.4.C.01 Access controls enforce user authorisations →Licences and authorisations for classified technical data or articles are forwarded by DDTC to the Defense Security Service under the NISPOM, with a copy to the applicant;
itar-international-traffic-in-arms-regulations::125.9 · Route classified export authorisations through the security service and return them on completion →Unless an exemption applies, a licence is needed for the oral, visual or documentary disclosure of technical data by U.S. persons to foreign persons, however it is transmitted (in person, telephone, correspondence or electronic means), including disclosures du...
us-itar-and-ear-export-control-and-data-security::ITAR 125.2(c) and 125.1(c) · Obtain authorisation before disclosing technical data to foreign persons in any form →Data processed for specific purposes may be communicated for further historical or scientific processing only with the data subject's consent and INPDP authorisation; the INPDP decides whether identifying data are removed.
tunisia-organic-law-on-personal-data-protection-law-no-2004-63::art49 · art. 49 Reuse data for historical or scientific research only with consent and INPDP authorisation →Data exported from SECRET and TOP SECRET systems is reviewed and authorised by a trustworthy source beforehand.
ISM-0664 · Review and authorisation of classified data exports →Questions people ask about authorisation
What is Authorisation?
Why is Authorisation important for compliance?
What concepts are related to Authorisation?
Which compliance frameworks address Authorisation?
Where can I learn more about Authorisation?
See how Authorisation applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.