Access Control

---

An access control system ensures that an information system meets the goals of the CIA triad.

Access control governs how subjects/principals may interact with objects.

• Subjects are people, devices, software processes, or any other system that can request and be granted access to a resource
  • aka principal
• Objects are the resources
  • e.g., network, server, database, app, or file
• Subjects are assigned rights or permissions on resources
• when implemented on a computer system or network,
  • it is a type of logical security
• typically implemented as an identity and access management (IAM) system