University:
Western Governors University
Course:
C844 | Emerging Technologies in Cyber Security
Academic year:

2022
Views:

91

Pages:

3
Author:

Hallie Randolph

Activity: Role-Based Access Control (RBAC) Matrix 3-3 Activity: Privacy Protection Case Study In this exercise, I have developed a role-based access control (RBAC) matrix for user access control (See Appendix). As a security architecture concept, RBAC matrices are a way of representing access control strategies visually. They help the practitioner ensure that the access control strategy aligns with the specific access control objectives. Matrices also help show when access controls may conflict with job roles and responsibilities. Least Privilege As is stands right now, not one person has full access or admin rights. This can be a challenge if there are errors made or if information is deleted or corrupted, and if any of the employees that only have access to certain areas are not available. At best, a second individual would benefit each department to ensure an errors or permissions are or are not granted to other individuals that do or do not require it. Having a second person responsible would help in such instances. Importance of Tool “With RBAC, employees can access only the resources and files they need to fulfill their responsibilities. Their credentials allow or restrict access based on the tasks they are assigned, which means they can access only the resources they need for their role, helping protect other data against misuse.” This helps minimize administration work and IT support, maximizes efficiency, and help improve compliance. Conclusion By using an RBAC model, companies can help better protect their assets and data. It will require less support from an IT standpoint, and it will only grant access to areas in which an employee is allowed to see (Least Privilege). Access can be added or removed based on trust and necessity by the security officers within the company. This helps prevent data loss and corruption based on security levels of the employees. Appendix CYB 200 Module Four Activity Template After reviewing the scenario in the Module Four Activity Guidelines and Rubric document, fill in each cell with one or more of the following roles: View, Create, Modify, Delete, None NOTE: Key information from the guidelines have been inserted below to assist with the selection of appropriate roles. Make sure you replace the highlighted text with appropriate roles. Username Patient information Norman None Employee information Access to the SaaS Access to backup logs None View, Create, Modify, Delete View Ryhead View None View None Simone None View, Create, Modify, Delete View None Janet View None View, Create, Modify, Delete View, Modify, Delete Dale View, Create, Modify None View None Ethan View None View View