SID-ACCESS-04 — SPOCP Policy-Based Query Authorization
| Property | Value |
|---|---|
| Owner | platform |
| Category | technical |
| CSF Function | protect |
| Group | Access Control |
Description
AuthZEN proxy queries authorized via SPOCP S-expression policy engine before forwarding to PDP. Prevents arbitrary trust evaluation requests from clients.
Components
Source References
Framework Requirements
ISO 27001 Annex A: A.5.18, A.8.3