Cybersecurity

Access Control

Security mechanism that restricts system access based on identity, role, or clearance level. SOC 2 maps access controls to CC6.1; in practice, the most common exception is accounts that stay active after an employee's departure.

The Authority Brief

One compliance analysis per week from Josef Kamara, CPA, CISSP, CISA. Federal and private compliance, written for practitioners.