Securing Organizational Information Systems Access Control

A leading business organization recognized the paramount importance of safeguarding sensitive employee and customer

information through robust Information Systems Access Control. Problems surfaced in the application of access control

principles, prompting an Information Systems Access Control strategic initiative.

The organization then set about putting together committees consisting of Information Systems users at various levels of

function within the organization. Each committee was led by up to two Information Systems or Cybersecurity experts with

one of the two being the sitting committee chairman. The role of each committee was to specifically identify common

Information Systems access control violations at all institutional user levels within the organization.

After the identification of all possible Information Systems access control violations at all institutional user levels within

the organization, each committee chairman and his co$-$cybersecurity expert within the same team, would then have to

assess and verify the efficacy of the known fundamental principles that guide the implementation of secure and efficient

information resource access against the most common violations as identified by the committees. This assessment and

verification process was necessary because it made it possible for cybersecurity experts to assess the effectiveness of

the application of each principle considering what would have been found to be the most common access control

violations as perpetrated by the business organization$$s overall user community.Examine the access control phases that a system goes through in order to finally provide access to information resources

for users.