Access Control Methods

Access Controls

• Access control is the process of identifying and granting privileges to users for information, systems, or resources.
• Three types of access control methods: logical, physical, and administrative.

Physical Access Controls

• Physical access controls are used by airlines to screen checked luggage and carry-on baggage.
• Presenting a ticket with an assigned seat and an acceptable form of identification is required.
• Badges with employee ID, name, and picture are used to grant employee access to public and private organizations.
• Keyboards and physical asset containers like file cabinets, safes, or vaults with codes, keys, or combinations control access to restricted rooms.
• Biometric access control systems can handle thousands of users and be configured via a secure web connection.
• Iris cameras are the most accurate biometric devices and can be used in various situations.

Logical/Technical Access Controls

• Protecting electronic information involves both physical and logical access controls.
• Logical access controls often entail multiple security controls and authentication techniques.
• Access to critical data should be determined by a person's role, and the need for access should be reviewed regularly.
• The Principle of Least Privilege (POLP) states that users should have only the bare minimum privileges necessary to perform their function.

User Authentication

• Identification credentials must be issued to authenticate the user, and three factors can be required: knowledge, possession, and inheritance.
• Assurance increases with a second and third authentication technique.
• Multi-factor authentication (MFA) is the norm, requiring users to enter a password and additional information.

Access Controls and Cloud Computing

• Access control is a key concern when moving critical applications and sensitive information to public and shared cloud environments.
• Cloud providers must provide access controls at least as robust as those employed by the client firm.
• Employees of the cloud service provider must be screened and trained to the same high standards.

Administrative Access Controls and Social Media

• Administrative action involves developing policies and procedures, providing education and training, and monitoring and evaluating use.
• Access control processes should complement social media and records management policies.
• Social media activities on behalf of the firm can be limited to authorized employees with specific roles and responsibilities.

Proof of Personhood Online

• Digital verification using zero-knowledge proofs based on a unique iris code can verify a person's humanness and uniqueness online.
• Worldcoin's biometric imaging device, the Orb, captures, records, and converts iris images into a string of numbers referred to as an iris code.
• World ID 2.0 offers more powerful privacy features and the ability to integrate with popular e-commerce, gaming, and social media platforms.

Learn about the different types of access control methods, including physical, logical, and administrative, and how they are used to grant privileges to users.