IT Security Risk Control Management: An Audit Preparation Plan

© Raymond Pompon 2016

Raymond Pompon, IT Security Risk Control Management, 10.1007/978-1-4842-2140-2_16

16. Logical Access Control

Raymond Pompon¹ 

(1)Seattle, Washington, USA

A very little key will open a very heavy door.

—Charles Dickens, Hunted Down

When you mention access control, most people’s minds go blank. Those few that understand technology usually think of passwords . When I think of passwords, I think of an organization that I worked with that had arguably the most difficult password policy I had ever encountered in my working life. The policy read: Passwords are required to be 12 characters, containing one symbol, one number, one lowercase, and one uppercase letter. Passwords must be changed every 45 days and new passwords cannot be ...