Fundamentals of Information Systems Security, 3rd Edition

Glossary of Key Terms

A

Acceptable use policy (AUP)

An organization-wide policy that defines what is allowed and disallowed regarding use of IT assets by employees and authorized contractors.

Access control

The process of protecting a resource so that it is used only by those allowed to use it; a particular method used to restrict or allow access to resources.

Access control list (ACL)

An implementation technique to control access to a resource by maintaining a table of authorized user IDs; also used to permit or deny IP packets to/from router and switch interfaces to managed IP traffic flow.

Access control policy

An organizational policy definition that defines how authorized users gain access to resources based on their role and job ...