NIST issues Guidelines for Access-Control Systems Evaluation Metrics. NISTIR 7874 is aimed at helping access control experts improve their evaluation of the highest security access-control systems. Access control is concerned with determining the allowed activities of legitimate users, mediating every attempt by a user to access a resource in the system. The report provides metrics for the evaluation of AC systems based on these features:Administration, the main consideration of cost;Enforcement capabilities; performance, performance and support.”]
Source: https://www.cuinfosecurity.com/nist-issues-access-control-guidance-a-5134