4.1 Enforce label-based access controls implementation

Information

Ensure that the database has the label-based access controls (LBAC) component implemented to protect sensitive data. It is recommended that the policies and the components are properly enforced at the column and/or row level.

LBAC increases the control of your data by deciding exactly who has read and/or write access to individual rows and columns.

Solution

Impose LBAC capability on tables and rows with sensitive data.

See Also

https://workbench.cisecurity.org/files/1654