# AC-15 Automated Marking

NIST SP 800-53 control. Family: AC Access Control. Function: preventative. In no baseline. Mapping licence: CC BY-SA 4.0.
Withdrawn from SP 800-53 by NIST. Its content moved into MP-03.

Statement: The information system marks output using standard naming conventions to identify any special dissemination, handling, or distribution instructions.
Guidance: Automated marking refers to markings employed on external media (e.g., hardcopy documents output from the information system). The markings used in external marking are distinguished from the labels used on internal data structures described in AC-16.

## Patterns that use it (1)
- Important (1): SP-013 Data Security Pattern

## Clauses by framework (12 frameworks)
- cobit_2019: DSS05
- iso_42001_2023: A.7.4
- nis2: Art. 21(2)(i)
- mas_trm: 9
- bsi_grundschutz: ORP.4
- anssi: Hygiene.8
- osfi_b13: B-13.3.2
- finma_circular: IV.D(78), IV.D(79)
- gdpr: Art.5(1)(f)
- dora: Art.8(1)
- hkma_tme1: TME1.7.2
- cbb_tm: TM-9

## More
- This control as JSON, with guidance and ATT&CK techniques: /api/v1/controls/AC-15
- Clauses only: /api/v1/controls/AC-15?fields=mappings
- Page for people: /controls/ac-15/
- Found an error? Open an issue at https://github.com/opensecurityarchitecture/osa-data/issues with the id, what OSA says and what the source says.