163e7687_Standards_for_Data_Stewardship__Category_I
[#] 4.2.7 [Action] Granting permission to view information [Category-II] Read access is restricted using various access control methods and is based on roles, classes, entitlements, or affiliations defined by respective Data Steward, or their designate. [Category-III] No special requirement [Category-I] 
Read access is restricted using various access control methods and is based on roles, classes, entitlements, or affiliations defined by respective Data Steward, or their designate.
Information Security Office - Minimum Security Standards for Data Stewardship
Category-I