Citation Audit

Citation: Policy Decision Point (PDP), which consists of the Policy Engine (PE) and the Policy Administrator (PA) – The PE decides whether to grant, deny, or revoke access to a resource based on enterprise policy, information from supporting components, and a trust algorithm. The PA executes the PE's policy decision by sending commands to a PEP that establishes and shuts down the communication path between subject and resource.

Control: CC ID 514 – Establish, implement, and maintain User Access Management procedures.