4.14 Access control decisions and failed decisions are loggedΒΆ
Verify the system can protect against aggregate or continuous access of secured functions, resources, or data. For example, consider the use of a resource governor to limit the number of edits per hour or to prevent the entire database from being scraped by an individual user.
Levels: 2, 3