Introduction Security Policy Information Management Password Management Virus, Worms & Trojans E-mail & Internet Usage Security in our Organization
   
Brief  
Bad Passwords  
Good Passwords  
Do's & Don'ts  
Access Control  
Secure Ids  
  Access Control in an organization


 
Access Control in an organization

 

A usage profile, detailing privileges and access rights, is assigned to each user. Administration account is strictly controlled and given based on special authorisations.

 

Each IT asset user is uniquely identified to the network through a user ID. Every user ID has a secret password. This user ID and password is required for access to relevant company assets.

 

User Registration

 

An authorized person who control the levels of access is nominated to create user IDs that can be granted as per the level specified by data owners / project managers

 

ADMIN maintains and reviews formal records of registered users and their privileges, to make sure that all redundant user accounts are deleted at the earliest and appropriate access levels are maintained

 

User Authentication

 

Username and passwords are used by normal users for all services and servers

 

We use a two-factor authentication as per project and client requirements, for administrator access to critical servers and remote access to the network

 

A formal process is established to control the issue and maintenance of secure ID token to access clients' data and systems during system development and maintenance

   
 
Security Awareness Program Disclaimer