privilege

{
  "id": "MLC-T-CYB-003274",
  "term": "privilege",
  "field": "Cybersecurity",
  "definition": "1. A right that, when granted to an entity, permits the entity access and/or authorization to an otherwise restricted object, state, or resource. Note: Privileges represent the authorized behavior of a subject. They are defined by an authority and embodied in policy or rules.\n\n2. The authorized behavior of a subject.\n\n3. A special authorization that is granted to particular users to perform security relevant operations.",
  "references": [
    "CNSSI 4009-2022 from NIST SP 800-162 (adapted); NIST SP 1800-27B from CNSSI 4009-2022; NIST SP 1800-27C from CNSSI 4009-2022; NIST SP 800-12 Rev. 1",
    "NIST SP 800-162",
    "NISTIR 5153",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/privilege/"
}