Apply risk treatment thinking to access-control decisions at a guarded site.
The move: treat access as a risk decision with five possible treatments. Access control is not a contest between nice and strict. It is a controlled way to reduce uncertainty. The guard is asking: Do we know who this person is? Do we know they are authorized? Do we know where they are going? Do we know who is accountable for them? Do we know what happens if we are wrong? Admit Use when identity and authorization are clear. Log if the site requires it. Verify Use when the request may be legitimate but a key piece is missing, such…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in