Access Control

Access Control encompasses the policies, procedures, and technologies that regulate who can access resources and what actions they can perform.

CISSP Relevance

Domain 5 (Identity and Access Management) dedicates significant coverage to access control models, implementation, and management.

For implementation guidance, see NIST SP 800-162.

Related terms: Least Privilege, Role-Based Access Control