Young hacker smiling

We hack your software

zero false positives

Expert intelligence + effective automation

REQ.094 Specify rules in declarative mood

This document contains the details of the security requirements related to the definition and management of access control in the organization. This requirement establishes the importance of specify access control rules in a declarative mood instead of pragmatic mood.

Requirement

Access control rules must be specified in declarative mood instead of pragmatic mood.

References

  1. HIPAA Security Rules 164.312(c)(1): Integrity: Implement policies and procedures to protect electronic protected health information from improper alteration or destruction.


Service status - Terms of Use