Introducing Advanced Permissions
Daniel Young
Making physical risk actionable to any organization. Founder & Chief Innovation Officer @ Circadian Risk Inc. | ASIS Member, CSO Risk Council Member
You’re the Chief Security Officer for an organization with 53 sites, and your company has just completed security assessments for all of them. Each report details the security vulnerabilities at every site —?so it’s information you’d like to keep private.
You need to be able to see all the reports, but not everyone on your team should have the same level of access. Building managers only need access to their own site’s report. Regional managers should only have access to the sites in their territories. Assessors should only be able to see the reports they completed.?
How can you make sure everyone has the appropriate level of access, especially if you’re assessing hundreds of sites?
Introducing Advanced Permissions
Not everyone in an organization needs the same level of access. According to InfoSecurity Magazine, 44% of organizations were found to have experienced a security breach in the last year. Of those companies, 74% said that the breach occurred because too much privileged access had been given to third parties who didn’t need that level of permission.
Read the rest here...