Types of Access Controls

ACD.

Access control is a security measure that is used to limit or control access to resources or information. There are four basic types of access controls: administrative, technical, physical, and automatic.

1. Administrative Access Control: Administrative access control involves policies and procedures that govern how users are granted access to systems and resources. This type of access control is used to define user roles and responsibilities, and to assign specific permissions and access levels based on those roles. It is also used to manage the creation, deletion, and modification of user accounts.

Administrative access controls also involve monitoring user activity and enforcing compliance with security policies and standards. Examples of administrative access controls include security training and awareness programs, security policies and procedures, background checks, and separation of duties.

2. Technical Access Control: Technical access control involves the use of technology to control access to systems and resources. This type of access control includes things like passwords, encryption, firewalls, and biometric authentication.

Technical access controls are used to prevent unauthorized access to systems and resources, as well as to protect data from theft or damage. Examples of technical access controls include intrusion detection and prevention systems, antivirus software, and access control lists.

3. Physical Access Control: Physical access control involves controlling access to physical spaces and resources. This type of access control is used to prevent unauthorized entry to buildings, rooms, and other physical locations.

Physical access controls include things like security cameras, keycard systems, and security personnel. They are used to monitor and control access to physical resources and to prevent theft, damage, or unauthorized access.

4. Automatic Access Control: Automatic access control involves the use of automated systems to control access to resources. This type of access control includes things like automatic login systems, timed access control, and session time-outs.

Automatic access controls are used to ensure that users are only granted access to resources for the duration of their need, and that access is automatically terminated once the user's session has ended. Examples of automatic access controls include single sign-on systems, access control lists, and role-based access control.