sentences:  The NIST model was adopted as a standard by INCITS as ANSI/INCITS 359-2004.A discussion of some of the design choices for the NIST model has also been published.In "Aligning Access Rights to Governance Needs with the Responsibility MetaModel (ReMMo) in the Frame of Enterprise Architecture" an expressive responsibility metamodel has been defined and allows representing the existing responsibilities at the business layer and, thereby, allows engineering the access rights required to perform these responsibilities, at the
  application layer.