Glossary: Policies, Standards and Risk Management
access control policy
A policy that sets who may use which systems and data, how access is requested, approved, granted and reviewed, and when it is removed. It is built on least privilege, need to know and separation of duties.
Where the book teaches it
Related terms
least privilegeneed to knowseparation of dutiesprivilege creepaccess reviewdata owner