Skip to content

Mandatory Access Control (MAC)

What is Mandatory Access Control (MAC)?

An access control model in which the operating system constrains the ability of a subject to access or perform operations on an object. Access decisions are based on security labels assigned to both subjects and objects.

Information Security

Frameworks that govern mandatory access control (mac)

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on mandatory access control (mac)

Requirements naming mandatory access control (mac) across 2 standards, quoted from the control text.

ITU-T X.805 - Security Architecture for End-to-End Communications1 control

Security Dimension 1 Access Control per X.805 Clause 6.1: Access Control protects against unauthorized use of network resources. Access Control ensures that only authorized personnel or devices are allowed access to network elements + stored information + info...

X805-Dim1-Access-Control-RBAC-Authorization-Resources-Network-Elements-Services-Applications · ITU-T X.805 Security Dimension 1 - Access Control + Role-Based Access Control (RBAC) + Authorization + Resources + Network Elements + Services + Applications + Access Limitations + Authorized Personnel + Discretionary + Mandatory Access Control →
Monetary Authority of Singapore Technology Risk Management Guidelines1 control

Implement Access Control + Cryptography + Network and Infrastructure Security per MAS TRM Chapters 9 + 10. Chapter 9 Access Control + Cryptography - access control policy + user identification + authentication (Multi-Factor Authentication MFA required for priv...

MAS-TRM-Access-Cryptography-Network-Security-Chapters-9-10-MFA-PKI-Encryption-Network-Segmentation · MAS TRM Access Control + Cryptography + Network + Chapters 9-10 + MFA + PKI + Encryption + Network Segmentation →

Questions people ask about mandatory access control (mac)

What is Mandatory Access Control (MAC)?
An access control model in which the operating system constrains the ability of a subject to access or perform operations on an object. Access decisions are based on security labels assigned to both subjects and objects.
Why is Mandatory Access Control (MAC) important for compliance?
Mandatory Access Control (MAC) is a key concept in Information Security. Understanding mandatory access control (mac) helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Mandatory Access Control (MAC)?
Mandatory Access Control (MAC) appears in the requirement text of ITU-T X.805 - Security Architecture for End-to-End Communications, Monetary Authority of Singapore Technology Risk Management Guidelines. Across these standards we have identified 2 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Mandatory Access Control (MAC)?
Explore our compliance framework pages to see how mandatory access control (mac) applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Mandatory Access Control (MAC) applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.