Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What is the conceptual difference between certification rules and enforcement rules in the Clark Wilson model?

Am I on a wrong path when I assume that certification rules ensure external integrity and enforcement rules ensure internal integrity?

share|improve this question
up vote 2 down vote accepted

I would say that the conceptual difference is one of primary functionality.

Certification Rules lay out how the system certifies that a particular data object is in a valid state (according to another set of rules). Enforcement Rules make sure that already-certified data object stays certified (maintains its integrity) as the system interacts with it.

To be more specific using Clark Wilson IM vernacular:

Certification rules specify how to guarantee that a CDI has been subjected to integrity verification procedures. Enforcement rules specify how the system must maintain the certified CDI as transactions happen.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.