Week 7 - Finding the Right Balance Between Security and Access

Not every organization protects its data the same way, which is why different access control methods exist.

Role-Based Access Control (RBAC) gives people access based on their job. If you're in HR, you get HR resources. If you're in accounting, you get accounting systems. It's simple to manage and works well for most businesses.

Discretionary Access Control (DAC) lets the owner of a file or resource decide who can access it. This makes sharing easy, but it can also increases the chance of someone accidentally giving the wrong person access.

Mandatory Access Control (MAC) is the strictest option. Access is based on security clearances instead of user decisions, making it ideal for government or military environments where sensitive information must stay protected.

Each method has its strengths, so the best choice depends on the organization's security needs. Finding the right balance between security, flexibility, and ease of management is the key to protecting valuable information.