Access Control

Adjunto:

• Administrative Control o Management control

1. Nivel de autorización (Usuarios o grupos)
   1. Top secret
   2. Secret
   3. Confidential
   4. Restricted
   5. Unclassified
2. Etiquetas (Fichero)
   1. Confidential
   2. Private
   3. Sensitive
   4. Public

1. User account:
2. Shared and generic accounts
3. Guest accounts
4. Service accounts
5. Privileged accounts:

1. Access this computer from the network
2. Allow log on locally
3. Back up files and directories
4. Change the system time
5. Take ownership of files or other objects

1. Read
2. Modify
3. Full Control

1. Read (R): 4
2. Write (W): 2
3. Execute (X): 1

1. Cisco Standard Access Lists
2. Cisco Extended Access Lists

1. Install software
2. Configure password policies
3. Configure auditing
4. Configure user rights
5. Restricted groups
6. Disable services and configure event logs
7. File system permissions
8. Software restrictions:
9. Lock down the system by disabling features

1. 1º - Local
2. 2º - Site:
3. 3º - Domain
4. 4º - Organization unit (OU)

1. Roles
2. Permissions
3. Encryption
4. Auditing

1. Account Expiration
2. Time-of-Day Restrictions:
3. Account Lockout:
   1. Account lockout threshold
   2. Account lockout duration
   3. Reset account lockout counter after
4. Account Disablement:
5. View Account Details:

1. Shared accounts
2. Credential management
3. Group policy
4. Password complexity:
5. Expiration
6. Recovery
7. Disablement
8. Lockout
9. Password history
10. Password reuse
11. Password length
12. Generic account prohibition

1. Group-based privileges
2. User-assigned privileges
3. User access reviews
4. Continuous monitoring