Question: Case Project 9-1: Develop a Role-based Access Control Matrix As a consultant with Best Security Consulting Co., you have been asked to develop a role-based

Case Project 9-1: Develop a Role-based Access Control Matrix As a consultant with Best Security Consulting Co., you have been asked to develop a role-based access control matrix for the IT department in an insurance company, Overland Underwriting. Overland Underwriting has provided a list of job titles and roles associated with access management. You are to develop an access matrix that specifies which job titles are permitted to perform which roles. The job titles are: System Engineer I, System Engineer II, Network Administrator I, System Engineering Manager, Security Administrator I, Security Administrator II, Security Manager, and IT Manager. The roles are: Review end user account request, Approve end user account request, Create end user account, Audit end user accounts, Review end user file server access request, Approve end user file server access request, Perform end user file server access change, Audit end user file system permissions. When you map job titles to roles, make sure that there is adequate separation of duties. For instance, someone who approves requests should not be the same person who fulfills requestsand someone else altogether needs to audit requests.

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!