Eleventh Hour Security+

Access Control Methods and Models

This section covers some of the key concepts associated with access control methods and models. Some of these directly relate to the formal models, so expect some repetition. however, the concepts themselves stand alone and can be implemented without implementing a full formal model.

Separation of duties

Separation of duties is a very important security concept, especially as it relates to fraud. Separation of duties is the concept that no one person should handle a transaction from beginning to end. Instead, some parts of a transaction should be executed by one person and other parts of the transaction should be executed by someone else entirely. Separation of duties allows for a basic level of fraud prevention ...