Tool

XACML

OASIS standard for attribute-based access control with request/response evaluation and obligations.

www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml

Where it helps

• Govern Sensitive Activities

  Classic request/response model for deciding whether an action on a resource is allowed.

• Context In, Decisions Out

  Formalises context in, decisions out, including obligations that travel with a permit.

• Governance Is Composable

  Policy and rule combining algorithms define how layered policies resolve without ambiguity.