Real Life Challenges in Access-Control Management

Free registration required

Executive Summary

In this paper the authors ask the question: What are the challenges of managing a physical or file system access-control policy for a large organization? To answer the question, they conducted a series of interviews with thirteen administrators who manage access-control policy for either a file system or a physical space. Based on these interviews the authors identified three sets of real-world requirements that are either ignored or inadequately addressed by technology: Policies are made/implemented by multiple people; policy makers are distinct from policy implementers; and access-control systems don't always have the capability to implement the desired policy.

  • Format: PDF
  • Size: 66.5 KB