Reply To: OCU C)ISSO A Discussion Lesson 04
Access control methods decide how users get permissions and how those permissions are managed and enforced. One method is administrative control, where policies and procedures define who gets access and how. For example, administrators must follow a formal process for granting user rights based on job roles. The video shows a Security Officer reviewing user access logs to ensure proper administration of permissions. Another method is using the RADIUS protocol for authentication, authorization, and accounting (AAA).
One pro of RADIUS is that it provides a central point of control for user logins across many services, making administration easier. It also supports multiple authentication methods and works well for large networks. A con of RADIUS is that it only encrypts the password in transit and may leave other data exposed. Also, setting up a RADIUS server can be complex and requires significant resources. By combining strong administrative practices with RADIUS’s technical capabilities, organizations can enforce good access control and maintain strong security.