# Access decision record

Author: Adrian Sutherland  
Edition: Version 1.0  
Prepared: September 2026  
Copyright: © 2005–2026 Adrian Sutherland

Replace prompts with your own decisions, sources and results. Link existing records where useful.

## Subject and resource

Identify the person or service requesting access, any delegated authority, the resource and the action.

## Policy and enforcement

State the conditions for access, the trusted information used and where permission is checked.

## Failure and revocation

Describe what happens when access is denied, permission has changed, a device is offline or current policy cannot be checked.

## Checks and observations

Record checks of permitted and denied access, their outcomes and the logs needed for review.