Match each item with a statement below.

Question

A. Confirming the identity of the entity seeking access to a logical or physical area
B. Principle by which employees are provided access to the minimal amount of information for the least duration of time necessary to perform their duties
C. Implemented at the discretion of the data user.
D. Determining which actions an entity can perform in that physical or logical area.
E. This principle increases the security of information and other assets by requiring that more than one individual be responsible for a particular information asset, process, or task.
F. Obtaining the identity of the entity requesting access to a logical or physical area.
G. This principle limits individuals' information access to what is required to perform their jobs.
H. Determined by a central authority in the organization.
I. Documenting the activities of the authorized individual and systems.

Answer 1

A. authentication
B. least privilege
C. discretionary access controls
D. authorization
E. separation of duties
F. identification
G. need to know
H. nondiscretionary access controls
I. accountability