Fluid Attacks logo
Contact Us
Young hacker smiling
Zero false positives

Expert intelligence + effective automation

Contact logo Contact Us

REQ.094 Specify rules in declarative mood

This document contains the details of the security requirements related to the definition and management of access control in the organization. This requirement establishes the importance of specify access control rules in a declarative mood instead of pragmatic mood.


Access control rules must be specified in declarative mood instead of pragmatic mood.


  1. HIPAA Security Rules 164.312(c)(1): Integrity: Implement policies and procedures to protect electronic protected health information from improper alteration or destruction.

Service status - Terms of Use