Glossary: Security Controls and Change Management

Policy decision point

Also written: policy enforcement point, policy engine, policy administrator, decision point, enforcement point

In NIST's Zero Trust model, the decision point decides each request: the policy engine decides and the policy administrator passes the decision on. The enforcement point allows or blocks the request in the traffic path.