Access Control Policy Access Control Policy Policies that describe who is allowed to access the data and/or which parts of the data. 📚 Reference: NIST SP 800-226 🏷️ Category: Cybersecurity 📊 Commonality: common Also known as: ABAC ACP