Answer

Running Head: REGULATIONS AND POLICIES FOR ACCESS CONTROL 1

REGULATIONS AND POLICIES FOR ACCESS CONTROL 4

Regulations and policies for access control

Professor’s name:

Student’s name:

Date:

Root causes of policies for access control

Access control is a data security fundamental component that indicates who can use and access company resources and information. Through authorization and authentication, policies in access control ensure that only allowed users can access the company's data. This is fundamental, which provides information security and physical security to minimize risks. The government has enacted policies for internal controls. Policies have been enacted to reduce the chances of internal threats from threat agents. Increased human cleverness has brought forward many threat agents. These are the people who can identify a weakness in the internal control systems and attacking them (Accessible access control: A visualization system for access control policy management, 2019).

Enactment of policies by the government has been influenced by the economic condition of the state. It is important to eliminate threats from businesses to make it easy to work under a friendly environment in the country. This is because they are the lead economic balancers in any country. The new scientific findings calls for the need to enact policies as there are so many methods of attack discovered by the attackers. Technological change calls for the need to enact access control policies and come up with better security plan for the access control systems. Political activities I one of the root causes of access control regulations because there are cases where threat agents attack the access control systems and ruin the reputation of the organization for political gains(Security access control policy of information system under the multi-domain mode, 2018).

In case the attackers are able to access the systems, they might attack an organization for financial gains, which will lead to losses or ruin the reputation of the organization. This might be a competing firm, and therefore the government has to enact policies to guide competition among organizations. Suppliers and customers have been at significant risk of being attacked. These policies have, thus, enhanced that better security systems have been provided to organizations to ensure that any information about suppliers and customers are safely kept in the company (Bertino et al., 2011).

Access control policies are the list of resources and roles which are supposed to be de-provisioned and provisioned. These work towards creating access policies which are supposed to manage the access control systems. Most of the policies are to protect an organization using access control systems to ensure their information is safe from criminals. The role based access policy indicates the job that an individual is assigned and the level of access he or she is allowed to attain. Therefore an individual will not go beyond what they are allowed to access in the control systems. Another one is the mandatory access control policy which restricts an employee to the specific task he or she has been assigned. This only allow them to access the objective information to which he or she is working on (Accessible access control: A visualization system for access control policy management, 2019).

.

There are various regulations, rules, and policies that the government has established for access control. Another government policy is to ensure identity management in the organization. There should be registration and re-registration of formal users of the systems. This is to ensure that only authorized users can access information. There also should be access governance for the course. This is to ensure that access rights of the user can be revoked in case she or he is no longer working for the organization (Security access control policy of information system under the multi-domain mode, 2018).

References

Accessible access control: A visualization system for access control policy management. (, 2019).

Bertino, E., Ghinita, G., & Kamra, A. (2011). Access control for databases: Concepts and systems. Now Publishers.

Security access control policy of the information system under multi-domain mode. (, 2018).