Cybersecurity for Executives by unknow

Author:unknow
Language: eng
Format: epub
Publisher: John Wiley & Sons, Incorporated
Published: 2014-08-01T00:00:00+00:00

An easy-to-follow software policy can keep you out of big trouble. Make sure you effectively and correctly manage your software both at home and in the office.

A final suggestion on your software policy: review it annually to ensure it is up-to-date. We suggest every September 19th.

5.2.1.14 Access Control Policy.

Do you lock your doors at night? Most people do and practice physical security access controls to prevent unauthorized access to their homes and facilities.

What about your information? Do you have an access control policy that addresses who can have access to your information? Do you define who can see it, who can edit it, and who can delete (aka destroy) it? You need an access control policy.

Access control for information is usually implemented in three ways:

Role-Base Access Control: In Role-Based Access Control, access decisions are based on an individual’s roles and responsibilities within the organization or user base.

Discretionary Access Control: Discretionary Access Control is a means of restricting access to information based on the identity of users and/or membership in certain groups.

Mandatory Access Control: Mandatory Access Control secures information by assigning sensitivity labels to information and comparing this to the level of sensitivity at which a user is operating. It ensures the enforcement of organizational security policy without having to rely on voluntary web application user compliance. This frequently is used in systems such as in government where you have mandatory segregation of information such as Top Secret, Secret, Confidential, and unclassified information.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.