$3.$ Access control is one of the security approaches that enables an organization to restrict access of its group of users to information or tangible assets.

a$)$ Explain any TWO $(2)$ the importance of access control implementation in an organization.

$(6$ Marks$)$

b$)$ Describe THREE $(3)$ principles required to apply access control.

$(9$ Marks$)$

c$)$ By considering the Uniec Campus System, why are different groups of users such as students and lecturers are assigned different access rights to the same information such as coursework?

$(2$ Marks$)$

d$)$ In your opinion, which critical characteristics of information should an organization consider the most when classifying the data? Justify your answer.

$(3$ Marks$)$

e$)$ What type of security policy best suits on assigning different level of authority to users? Justify your answer.

$(3$ Marks$)$