CISSP Training Guide

Access Control Models

Explain access control models.

This section covers some strategies or models for implementing access controls across an organization. These models serve as rules for the road when figuring out some general principles that should be followed when implementing access control. Most of these were originally developed with a government slant but can easily be applied to commercial settings. However, the examples in this section use the general government classification scheme of unclassified, confidential, secret, and top secret, where unclassified is the lowest and top secret is the highest. The reason this is done is that even people who have not worked for the government understand this hierarchical scheme, which makes explaining ...