CISSP Cert Guide, 5th Edition

Chapter 5

Identity and Access Management (IAM)

This chapter covers the following topics:

• Access Control Process: Concepts discussed include the steps of the access control process.

• Physical and Logical Access to Assets: Concepts discussed include access control administration, information access, systems access, device access, facilities access, application access, and service access.

• Identification and Authentication Concepts: Concepts discussed include knowledge factors, ownership factors, characteristic factors, location factors, time factors, single- versus multifactor authentication, device authentication, password-less authentication, and groups and roles.

• Identification and Authentication Implementation: Concepts discussed include authentication, ...