Access Control rules or confinements that describe the access privileges of resources for subjects.
Source(s):
NIST SP 800-192
under Constraint
Factors that impose restrictions and limitations on the system or actual limitations associated with the use of the system.
Source(s):
NIST SP 800-160 Vol. 1