CSA Group Information Technology - Security Techniques - Security Information Objects for Access Control (Adopted ISO/IEC 15816:2002, first edition, 2002-02-01)

Scope The scope of this Recommendation | International Standard is:  a) the definition of guidelines for specifying the abstract syntax of generic and specific Security Information Objects (SIOs) for Access Control;  b) the specification of generic SIOs for Access Control;  c) the specification of specific SIOs for Access Control.  The scope of this Recommendation | International Standard covers only the "statics" of SIOs through syntactic definitions in terms of ASN.1 descriptions and additional semantic explanations. It does not cover the "dynamics" of SIOs, for example rules relating to their creation and deletion. The dynamics of SIOs are a local implementation issue.