This comprehensive course delves into the fundamentals and complexities of Access Control Systems, vital for protecting information assets. It covers Access Controls, including asset classification, marking, and data retention policies, and clarifies the roles of data owners, custodians, and system owners. The course categorizes Access Controls into physical, technical, and administrative, alongside preventative, deterrent, detective, and corrective controls. It contrasts mandatory and discretionary controls, introduces Role-Based Access Control (RBAC), its constraints, and hierarchical models, and explores Attribute-Based Access Control (ABAC). The course further discusses Authentication, Authorization, and Accounting (AAA) mechanisms, including Radius, TACACS+, and Diameter, and examines port-based access controls like Port-Security and 802.1x, alongside Network Access Control Lists and segmentation techniques for enhancing security. It also provides an overview of Intrusion Detection and Prevention Systems (IDS/IPS) as tools for access control.
