Defining access control policy

An access control policy documents and specifies the resources that employees, management, contractors, business partners and customers can access. It also states when and where such access can take place.

An access control policy points out the following high-level concerns:

• Necessary resource access types.
• Access scope
• Regulatory compliance considerations for access
• Coordination across the organisations' departments
• Control types that enable access management and oversight