Security controls
Before exploring access controls, let's discover some important terms in security controls. By definition, a control as a noun means an entity that checks based on a standard. Security controls are divided into three main categories:
- Management security controls: These use managerial techniques and planning to reduce the following risks:
- Vulnerability analysis
- Pentesting
- Risk analysis
- Technical security controls: This is also known as operational security controls. They use both technologies and awareness as safeguards. These are some examples:
- Firewalls
- Encryption
- Intrusion detection systems
- Antivirus
- Training
- Physical security controls: These are the physical safeguards used to protect the following data:
- Cameras
- Gates
- Biometrics
- Sensors
Access control models
Access controls are a form of technical security controls. Subjects and objects are two important terminologies. A subject is an active entity, such as an action (modification or access to a file, for example). An object is a static...
