It 244 Week 7

Associate Level Material
Appendix F









nettle regard Policy


assimilator Name: Tayla DaSilva

University of Phoenix

IT/244 Intro to IT Security

Instructors Name: pack LeMaster

Date: November 5, 2012



I am putting this on here to let you know that you told me to put this on here so you wouldnt deduct points sorry it is so late.

Access Control Policy




1 Authentication

Authentication credentials really help manoeuver chafe to sensitive data or systems by making it literally to get unauthorized accession to them. Passwords and usernames be a good way to start because if you use those rights then these are hard to bypass, but multifactor authentication is a more competent way for secure access. Triple authentication requires something you ease up, something you know, and something you are such as a keycard, password and a fingerprint.


2 Access control strategy


1 Discretionary access control

The principle of to the lowest degree privilege helps keep all important files and document unplowed confidential and accessed by those who have the proper authority to access them. This normally follows a chain of command and whoever is lower on that chain go out have less access than those higher(prenominal)(prenominal) in command.



This means that the CEO or owner of the company, low the principle of least privilege, has the most power throughout the satisfying company and derriere access any documents that they want.


2 needful access control

Here mandatory access control will use grated according to security clearances. Certain employees will have higher security clearances than others depending on their jobs. Higher security employees can access files for lower clearances but lower clearances employees cannot access files higher than their clearance.


3 Role-based access control

Here role based access control will be used when more than iodin employee is required to do a task. This way they can tame together on necessary...If you want to get a full moon essay, order it on our website: Orderessay



If you want to get a full essay, wisit our page: write my essay .