From the course: CISSP Cert Prep (2021): 5 Identity and Access Management

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Understand account and privilege management

Understand account and privilege management

From the course: CISSP Cert Prep (2021): 5 Identity and Access Management

Start my 1-month free trial

Understand account and privilege management

“

- [Instructor] Account management is one of the fundamental responsibilities of information security professionals. This includes designing strong processes that implement the principles of least privilege and separation of duties, implementing job rotation schemes and managing the overall account life cycle. The principle of least privilege states that an individual should only have the minimum necessary permissions required to perform their job function. The separation of duties principle states that performing sensitive actions should require the collaboration of two individuals. Account managers issuing permissions should ensure that the permissions they grant users are consistent with these principles. I discussed both of these principles earlier in this course. Many organizations also implement job rotation schemes designed to move people around from job to job on a periodic basis. This has obvious personnel…

Contents