The management of access to confidential information is a key challenge for many companies. It is often associated with customer trust which makes it more important to guard against misuse. Data that could identify a person must be controlled by a set of policies to prevent identity theft, compromising of accounts or systems, and other serious consequences. To avoid these risks, access to sensitive information should be controlled through strict authorization based on roles.

There are a variety of models that can be used to give access to sensitive information. The most basic model, called discretionary access controls (DAC) allows an administrator or owner to decide who is able to view files and what actions they can take. This model is standard in Windows, macOS and UNIX filesystems.

A more robust and secure approach is role-based access control (RBAC). This model aligns privileges according to the specific requirements of a job. It also implements key security principles, such as separation of privilege as well as the principle of least privilege.

Fine-grained control of access extends beyond RBAC, allowing administrators to assign permissions according to an individual’s identity. It makes use of a combination that includes something you are familiar with, such as an account number, password, or device that generates codes, and also something you own, such as keys, access cards, or devices that generate codes and also something you are such as your fingerprint, iris scan, or voice print. This gives you more control management and can help eliminate many of the common issues with authorization, including unmonitored access by former employees as well as access to sensitive information via third-party applications.

https://technologyform.com/technologies-are-the-future/