ABSTRACT

The Access Control Domain outlines various information system security options that control access to an organization’s information and data processing resources. It builds on the basic issues addressed in the Information Security Management Domain, with an emphasis on various administrative, physical, and technical/logical controls.