10 Logical Access Controls
This chapter covers
- Access Control Models: discretionary access control (DAC), mandatory access control (MAC), and role-based access control (RBAC)
- Identity management technologies
- The monitoring of logical access
In the previous chapter, we explored how administrative controls guide and regulate human behavior, as well as how physical access controls use tangible barriers to restrict access to facilities, systems, and assets. However, these measures alone are insufficient for protecting digital environments. This brings us to the concept of logical access controls, which use software-based mechanisms to regulate access to systems, applications, networks, and data.
Logical access controls add another layer of defense, ensuring that only authorized users can access digital resources. Even if an attacker gains physical access to a device, logical controls can prevent unauthorized use. For instance, having a laptop does not automatically grant access to its contents if a user must provide valid credentials to log in. Logical controls also help enforce administrative policies by defining when, where, and how users can access organizational resources.