An Introduction To
Information, Network and Internet Security
Business requirement for access control
Objective: To control access to information.
Access to information and business processes should be controlled on the basis of business and security requirements.
Access control policy
Business requirements for access control should be defined and documented.
The Security Practitioner
An Introduction to Information Security
