Access Control rules or confinements that describe the access privileges of resources for subjects.
Sources:
NIST SP 800-192
under Constraint
Limitation on the system, its design, its implementation, or the process used to develop or modify a system.
Sources:
NIST SP 800-160v1r1
Limitation that restricts the design solution, implementation, or execution of the system.
Sources:
NIST SP 800-160v1r1
from
ISO/IEC/IEEE 29148:2018