§6.3 · BUILDING · 4 MIN READ · EDITION 1.0
Access control and permitted use
Evidence classification determines where it may be processed, which model or environment is permitted, and how long it is retained.
Public, internal, confidential and restricted evidence classes carry different processing environments and retention rules; a supplier's confidential submission is not evidence for a public benchmark.
Access should be enforced technically, not only through policy language that no system checks.
PUT THIS INTO PRACTICE
- 01Classify each evidence source before use.
- 02Match the processing environment to the classification.
- 03Enforce retention and access technically where possible.
RELATED INSTRUMENTS
CITE THIS SECTION
§6.3 · Edition 1.0 · Access control and permitted use