CISSP Training Guide

Access Control Techniques

Define common access control techniques:

• Discretionary access control

• Mandatory access control

• Lattice-Based access control

• Rule-Based access control

• Role-Based access control

• The use of access control lists

Access controls are important, but how do you determine the proper access controls an individual or entity should have on a system. There are two general types of access control: discretionary and mandatory access controls. They are often referred to by their acronyms: DAC (discretionary access control) and MAC (mandatory access control).

Discretionary Access Control

Discretionary access control is essentially based on human decisions about whether someone (or a service, an application, and so on) should be allowed access ...