History
- Priority
- must
- Nov 2018
- Removed
- Replaced by security controls 1503 and 1508.
- 2017
- Users’ authorisations must be enforced by access controls.
- 2015
- Users’ authorisations must be enforced by access controls.
- 2010
- Agencies must have system users’ authorisations enforced by access controls.