ISC2 Certified in Cybersecurity (CC)Access Controls ConceptsHard
A large university campus is installing a new system to control access to various buildings, including dormitories, academic halls, and research labs. They need a system that can manage access for thousands of students, faculty, and staff, with different access levels based on their roles and specific course enrollments or lab projects. The system must also integrate with existing HR and student information systems to automatically update access rights. Which overarching access control framework is most suitable for managing identities and their access across such a diverse and dynamic environment?
- AIdentity and Access Management (IAM)
- BPhysical Access Control System (PACS)
- CData Loss Prevention (DLP)
- DPrivileged Access Management (PAM)
Show answer & explanationAnswer & explanation
Correct answer: A. Identity and Access Management (IAM)
Identity and Access Management (IAM) is the overarching framework that encompasses policies, processes, and technologies for managing digital identities and controlling their access to resources. It handles the entire lifecycle of identities (provisioning, deprovisioning), authentication, authorization, and integration with various systems, making it ideal for a large, dynamic environment like a university campus.
Why the other options are wrong
- B. PACS specifically manages physical access (doors, gates), but IAM provides the logical framework for who gets access and why.
- C. DLP focuses on preventing sensitive data from leaving the organization, unrelated to managing user identities and access rights.
- D. PAM specifically manages highly privileged accounts, not the general user base of a university.
Identity and Access Management (IAM)
A comprehensive framework of policies, processes, and technologies that manage digital identities and control their access to resources across an organization.
- Manages entire identity lifecycle (provisioning, deprovisioning)
- Encompasses authentication, authorization, and auditing
- Centralizes and streamlines access control
Memory trick: IAM: 'It's All Managed' – identities, access, and everything in between.