The existing NGAC standard comprises three distinct standards: INCITS 499-2017, Information technology Next Generation Access Control Functional Architecture (NGAC-FA); INCITS 526-2016, Information technology Next Generation Access Control Generic Operations And Data Structures (NGAC-GOADS); and INCITS 525, Information technology Next Generation Access Control Implementation Requirements, Protocols and API Definitions (NGAC-IRPAD). This situation has resulted in redundancies (e.g., due to reestablishing context in each member) and inconsistencies among members (e.g., due to different production times), which increases the difficulty to understand and apply the specifications, and to maintain them (e.g., different review cycles and production of corrigendum). The scope of this work is to produce a single consolidated standard based on the existing three standards that constitute the NGAC.
