CISSP - Access Control Implementation: ACLs, PAM, and JIT
CISSP Domain 5 access control implementation: ACLs vs capability tables, least privilege and access creep, constrained interfaces, need-to-know, Privileged Access Management (PAM) with credential vaulting and session recording, Just-in-Time access provisioning, and access reviews with IGA. Part of the complete CISSP study playlist.
▶ Watch next: CISSP - Identity and Access Provisioning: Account Types and IGA [5.6] https://www.youtube.com/watch?v=DzwnRkCQQHY
Chapters
- 0:00 Access Control Implementation -- From Model to Reality
- 2:53 ACLs and Capability Tables -- Two Sides of the Matrix
- 4:51 Least Privilege -- The Most Violated Security Principle
- 6:58 Constrained Interfaces and Need-to-Know
- 9:07 Privileged Access Management (PAM)
- 11:30 Just-in-Time Access -- Privilege When You Need It
- 13:46 Quiz Time
CISSP Domain 5 access control implementation: ACLs vs capability tables, least privilege and access creep, constrained interfaces, need-to-know, Privileged Access Management (PAM) with credential vaulting and session recording,...
Key Topics
- Access Control Implementation -- From Model to Reality
- ACLs and Capability Tables -- Two Sides of the Matrix
- Least Privilege -- The Most Violated Security Principle
- Constrained Interfaces and Need-to-Know
- Privileged Access Management (PAM)
- Just-in-Time Access -- Privilege When You Need It