1. Access Control:
Access control mechanisms regulate who can access network resources and
what actions they can perform based on their identities, roles, and privileges.
Authentication verifies the identity of users or devices attempting to access
the network through methods like passwords, biometrics, smart cards, or
digital certificates.
Authorization determines the permissions granted to authenticated users or
devices, specifying which resources they can access and what operations
they can perform.
Accounting tracks and logs user activities and resource usage for auditing,
compliance, and security monitoring purposes.
Role-based access control (RBAC) assigns permissions to users based on
their roles and responsibilities within the organization, simplifying access
management and reducing the risk of unauthorized access.
2. Patch Management:
Patch management involves regularly updating software, operating systems,
and firmware with security patches and updates to address known
vulnerabilities and bugs.
Vulnerabilities are weaknesses in software or systems that could be
exploited by attackers to compromise security.
Patching closes these vulnerabilities by fixing software flaws, implementing
security enhancements, or removing outdated features.
Patch management processes include vulnerability assessment, patch
prioritization, testing, deployment, and monitoring to ensure timely and
effective patching without disrupting business operations.
3.
