What is Access Control? Components and Types

This document provides a concise overview of access control principles and practices, explaining common models (discretionary, mandatory, role-based, and attribute-based), the interplay of physical and logical controls, authentication and authorization mechanisms, privileged access management, segregation of duties, and strategies for reducing credential theft and privilege creep. It emphasizes implementing least privilege, continuous monitoring, zero trust principles, and inventory-driven remediation to strengthen organizational access posture.