// THREAT DETECTION AND DATA PRIVACY TERM

Access Control

Access Control is a security method that regulates who or what can view or use resources within a system. It ensures that only authorized users and processes can interact with specific data, applications, or network segments, limiting potential security breaches.

Access Control — illustration from Wikipedia
Image via Wikipedia

TECHNICAL DEFINITION

Access Control, a core component of cybersecurity defense architecture, is a policy-driven mechanism that governs an entity's (user, process) ability to interact with a resource (data, application, system) by enforcing authorization rules, often based on identity, roles (RBAC), attributes (ABAC), or discretionary permissions (DAC), thereby protecting confidentiality, integrity, and availability.

BACKGROUND

Computer security is a subdiscipline within the field of information security. It focuses on protecting computer software, systems, and networks from threats that can lead to unauthorized information disclosure, theft, or damage to hardware, software, or data, as well as to the disruption or misdirection of the services they provide.

READ MORE ON WIKIPEDIA

SYNONYMS & ALIASES

  • Authorization
  • Permission Management
  • IAM
  • Entitlement Control
  • Resource Security

USAGE NOTE

Effective Access Control is vital in defense strategies to enforce the principle of least privilege, preventing unauthorized data access or system manipulation across critical infrastructure.

DEVELOPERS

Organizations developing technology related to Access Control.

  • Microsoft

    Develops a comprehensive suite of identity and access management solutions, including Microsoft Entra ID (formerly Azure Active Directory) and Conditional Access, critical for securing access across cloud and hybrid environments for enterprises and defense organizations.

  • Okta

    A leading provider of identity and access management (IAM) solutions, offering single sign-on (SSO), multi-factor authentication (MFA), and access policy enforcement for workforce and customer identities.

  • CyberArk

    Specializes in Privileged Access Management (PAM), securing, managing, and monitoring privileged accounts and credentials to protect organizations from advanced cyber threats and insider risks.

  • SailPoint

    Provides identity governance and administration (IGA) solutions that enable organizations to manage and secure all identities, ensuring that the right people have the right access to the right resources.

  • Cisco

    Offers robust network access control (NAC) solutions like Cisco Identity Services Engine (ISE), which enforces security policies on devices and users connecting to networks, crucial for defense infrastructure.

  • BeyondTrust

    Delivers a universal platform for intelligent identity and access security, including privileged access management (PAM), endpoint privilege management, and secure remote access to prevent data breaches.

  • Ping Identity

    Focuses on intelligent identity solutions for the enterprise, providing single sign-on (SSO), multi-factor authentication (MFA), access security, and API security to enable secure access for employees and customers.

RELATED TERMS IN DEFENSE & ARCHITECTURE