Welcome to Domain three, Access Control Concepts for Certified in Cybersecurity.
I've often said that this is the most important part of any security program.
Access control is not just about keeping unauthorized people out,
but it is about ensuring that people can do their jobs enabling access,
allowing authorized personnel to perform authorized functions.
Access controls is the heart of the security program,
whether it is access to buildings, networks,
systems, or data.
We will examine identity and access management where we
identify the entities that are requesting access,
whether a personal or process,
we authenticate the entity and grant them the appropriate level of access,
a process we call authorization.
We log all activity so we have a record of who did what
and to support compliance requirements.
This course will examine some access control principles and
both physical and logical access controls.
This should be fun.
And we will examine very practical information that we will use every day.
Let's get started.