Restrict access to systems and system components to only those information resources that are owned, provisioned, or issued by the organization.
Restrict access to systems and system components to only those information resources that are owned, provisioned, or issued by the organization.