Learn more about business with this collection
How to prioritize tasks effectively
How to manage your time efficiently
How to reduce stress and anxiety
Access control policies
A fundamental aspect of implementing a business's access control system is developing the access control policy.
An access control policy is the strategic foundation of all the best access control systems. Every company should decide the data and resources each employee should be able to access.
4
18 reads
Defining access control policy
An access control policy documents and specifies the resources that employees, management, contractors, business partners and customers can access. It also states when and where such access can take place.
An access control policy points out the following high-level concerns:
- Necessary resource access types.
- Access scope
- Regulatory compliance considerations for access
- Coordination across the organisations' departments
- Control types that enable access management and oversight
4
4 reads
How to determine access
Determining everyone's proper place is the result of extensive thought and planning.
For example, company CEOs have ultimate control over all business decisions and need access to extensive data. Yet CEOs wouldn't have access to detailed accounts payable or receivable accounting systems as a measure to prevent internal fraud. CEOs might also not have free access to a factory floor because they lack the training and gear to move safely around.
4
5 reads
The need for an access control policy
Smart business practices require predictability, risk management, regulatory compliance and process controls.
Access breaches can cause damage, such as the loss of computer systems, theft and injury. An access control policy enables a business to anticipate and lower potential risks.
4
11 reads
All aspects of business operation require an access review
Key elements to include in an access control policy:
- Building access, including specific areas like warehousing, shipping docks, utility rooms for electrical panels, parking lots, etc.
- Computer, communications and other digital infrastructures.
- Data on databases, servers, individual workstations, laptops, etc.
- Business processes.
- Physical safety of personnel in case of an emergency, like a natural or man-made disaster.
- Regulatory and legal compliance standards.
4
3 reads
Models and mechanisms
Models are the step between creating a policy and implementing it. They include detailed rule descriptions that don't depend on any given hardware, software or other mechanisms.
Mechanisms can be software-based, such as an access control list or a physical item like a key or swipe card. Proper documentation will record which mechanisms will be used where.
4
6 reads
IDEAS CURATED BY
Other curated ideas on this topic:
Read & Learn
20x Faster
without
deepstash
with
deepstash
with
deepstash
Personalized microlearning
—
100+ Learning Journeys
—
Access to 200,000+ ideas
—
Access to the mobile app
—
Unlimited idea saving
—
—
Unlimited history
—
—
Unlimited listening to ideas
—
—
Downloading & offline access
—
—
Supercharge your mind with one idea per day
Enter your email and spend 1 minute every day to learn something new.
I agree to receive email updates