Identity and Access Management
An IS auditor should review the logical access control of the organization with the prime objective of determining whether access is granted and controlled as per approved authorizations. As a CISA aspirant, you are expected to understand the concepts of identity and access management.
Logical access controls are a set of tools and protocols with the following objectives and purposes:
- Identification: Identification refers to the process of identifying a user or entity attempting to access a system, network, or resource. It involves providing a unique identifier or username to distinguish one individual from another. For example, when you enter your username or email address while logging into a website, you are providing identification information.
- Authentication: Authentication is the process of verifying the identity of a user or entity. It ensures that the person or entity claiming to be a particular user is indeed who they say they...
