Access control is a security critical function in an enterprise. Hence, the access policies and the additional information required for decision making must be securely created, administered, stored and provisioned.

Axiomatics has developed a Governance framework for XACML-policies and the attributes needed to instantiate and to trigger these policies. This governance framework can be applied to identify the critical components and information that will affect the access decisions and also the management of these from a security governance perspective.