knobit.org

I2 (1.5 points)

edu:Question

https://knobit.org/id/task/dsec-access-control/I2

Also as Turtle · JSON-LD · RDF/XML

dcterms:licensehttps://creativecommons.org/licenses/by/4.0/
owl:sameAshttps://bitbucket.org/reffa/ontology/id/task/dsec-access-control/I2
rdfs:labelI2 (1.5 points) en
schema:hasPartdsec-access-control I2: the analyst can export the full customer list
schema:hasPartdsec-access-control I2: the DBA reads personal codes
schema:hasPartdsec-access-control I2: a shared privileged reporting account
schema:identifierI2
schema:position4
schema:text0.5 each. (a) ANALYST holds export_customer_list, which no data analyst duty needs. (b) DBA holds read_personal_code: administrators do not read customer data in clear; break-glass covers incidents. (c) SVC_REPORTING is a shared interactive login with admin rights: replaced by personal accounts and a non-interactive service account without admin. en

Used by

has questionBank role and entitlement design - masking bypass and segregation of duties (access control anomaly skills)
schema:isPartOfdsec-access-control I2: the analyst can export the full customer list
schema:isPartOfdsec-access-control I2: the DBA reads personal codes
schema:isPartOfdsec-access-control I2: a shared privileged reporting account