Reference no: EM131432345
Assignment: Evaluating Access Control Methods
Imagine you are an Information Systems Security Specialist for a medium-sized federal government contractor. The Chief Security Officer (CSO) is worried that the organization's current methods of access control are no longer sufficient. In order to evaluate the different methods of access control, the CSO requested that you research: mandatory access control (MAC), discretionary access control (DAC), and role-based access control (RBAC). Then, prepare a report addressing positive and negative aspects of each access control method. This information will be presented to the Board of Directors at their next meeting. Further, the CSO would like your help in determining the best access control method for the organization.
Write a three to five (3-5) page paper in which you:
1. Explain in your own words the elements of the following methods of access control:
a. Mandatory access control (MAC)
b. Discretionary access control (DAC)
c. Role-based access control (RBAC)
2. Compare and contrast the positive and negative aspects of employing a MAC, DAC, and RBAC.
3. Suggest methods to mitigate the negative aspects for MAC, DAC, and RBAC.
4. Evaluate the use of MAC, DAC, and RBAC methods in the organization and recommend the best method for the organization. Provide a rationale for your response.
5. Speculate on the foreseen challenge(s) when the organization applies the method you chose. Suggest a strategy to address such challenge(s).
6. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
The specific course learning outcomes associated with this assignment are:
- Analyze information security systems compliance requirements within the User Domain.
- Use technology and information resources to research issues in security strategy and policy formation.
- Write clearly and concisely about topics related to information technology audit and control using proper writing mechanics and technical style conventions.
|
Identify the types of descriptive statistics
: Identify the types of descriptive statistics that might be best for summarizing the data, if you were to collect a sample. Analyze the types of inferential statistics that might be best for analyzing the data, if you were to collect a sample
|
|
Encapsulating the concept of processing
: When a user signs in for the first time to a website, the user has to submit personal information, such as user_id, name, email address, telephone number and so on. Typically, there are two fields for passwords, requiring the user to enter the pas..
|
|
Discuss about the objective positivist neoanalytic writers
: While there are many neoanalytic writers, they can be divided into two general categories. Some are objective positivist thinkers while others are relativistic/constructivist thinkers. Philosophically, what is the difference among objective positi..
|
|
Which error is more serious for the race organizers
: Describe type I and type II errors in this context.- Which error is more serious for the swimmers? Why?- Which error is more serious for the race organizers? Why?
|
|
Negative aspects of employing a mandatory access control
: Explain in your own words the elements of the following methods of access control: Mandatory access control (MAC) and Discretionary access control (DAC)
|
|
Knowledge of sql server
: You work for a manufacturing company. The company has recently hired a programmer who does not have knowledge of SQL Server, but has been tasked to develop -queries. As a database administrator, you have been tasked with the following to help him/..
|
|
What is american civil religion
: What is American Civil Religion, according to Robert Bellah, and what is Philadelphia's place in its origins? What do you think that Hannah Freeman and Richard Allen, respectively, would have thought about the notion, and why?
|
|
What hypotheses should be tested in terms of p
: What hypotheses should be tested, in terms of p, the true proportion of students who have missed a test because they overslept, in order for college officials to prove that the new academic policy is causing fewer students to be late for exams?
|
|
Choose three different ethnic groups
: Choose three different ethnic groups. For each group, provide examples of how counselors may best build rapport and trust with clients. Provide scholarly evidence in your response.
|