CISSP - Access Controls
Ashok Kakani
![Ashok Kakani]()
Ashok Kakani
? CISO ? Cybersecurity Executive ? Enterprise Security Architect ? Cloud Security ? GRC ? Security Product Implementation ? Trusted Advisor ? AI/ML ? Automation
There are three broad categories of access control:
- Administrative
- Technical
- Physical.
Each category has different access control mechanisms that can be carried out manually or automatically. All of these access control mechanisms should work in concert with each other to protect an infrastructure and its data.
- Preventive Intended to avoid an incident from occurring
- Corrective Fixes components or systems after an incident has occurred
- Recovery Intended to bring the environment back to regular operations
- Detective Helps identify an incident’s activities and potentially an intruder
- Compensating Controls that provide an alternative measure of control
