Securing Organizational Information Systems Access Control

A leading business organization recognized the paramount importance of safeguarding sensitive employee and customer information through robust Information Systems Access Control. Problems surfaced in the application of access control principles, prompting an Information Systems Access Control strategic initiative.

The organization then set about putting together committees consisting of Information Systems users at various levels of function within the organization. Each committee was led by up to two Information Systems or Cybersecurity experts with one of the two being the sitting committee chairman. The role of each committee was to specifically identify common

Information Systems access control violations at all institutional user levels within the organization.

After the identification of all possible Information Systems access control violations at all institutional user levels within the organization, each committee chairman and his co$-$cybersecurity expert within the same team, would then have to assess and verify the efficacy of the known fundamental principles that guide the implementation of secure and efficient

information resource access against the most common violations as identified by the committees. This assessment and verification process was necessary because it made it possible for cybersecurity experts to assess the effectiveness of the application of each principle considering what would have been found to be the most common access control

violations as perpetrated by the business organization$$s overall user community.

Provide an analysis that involves the identification, significance as well as implementation challenges of the fundamental

principles on which access control is based