Access Control Policy

At the very heart of Information Security lay the principles of Authentication, Authorization and Accountability, also known as AAA. In plain language, these principles state that:

a. Every action of a system, application or person that may affect the security of an information asset (physical or electronically format) should be allowed only after formal requesting and granting of permission.

b. Every authorized action of a system, application or person, seemingly to bear relevance for the security of an information asset should be permitted through a set of access controls.

The purpose of this policy is to lay out the general rules that must be followed in designing and implementing company – wide managerial, operational and technical access controls, that prevent unauthorized access.