Access Controls

Access Controls

1. processes characterize

   • identification
     • Secure identities
       • Unique
       • nondescriptive
       • securely issued
   • authentication
     • By Knowledge
     • By Ownership
     • By Characteristic
       • Fingerprints Face Retina and iris Palm and hand geometry Blood and vascular information Voice
       • Type I error
         • False Rejection
       • Type II error
         • False Acceptance
   • authorization
     • Implicit Deny
     • Need to know
   • accounting

2. Access Control Process

   • Access Control Policy
     • Data at rest
     • Data in motion
     • Data in use
   • Data Disposal
     • Clearing
     • Purging
     • Destroying

3. Roles

   • Executives and senior management
   • Data owner
   • Data custodian
   • System owner
   • Security administrator
   • End user
   • Security officer
   • Information system security professional
   • Auditor