Policy enforcement point
In short: A policy enforcement point is the place in a system where a policy decision is applied to a real request. For agents it is often a gateway, proxy or SDK hook. A policy that is written down but has no enforcement point is advice for agents, not a working control.
Which controls use this term?
- GOV-06Per-action policy. Check each agent action against policy at the moment it happens, using the agent, the person behind it, the tool and the data involved.
Which terms are related?
Agent governance, Per-action policy, Allow ask deny, MCP gateway, Conditional access.
Reviewed by The Register desk