PART OF THE NEW JONES & BARTLETT LEARNING INFORMATION SYSTEMS SECURITY & ASSURANCE SERIES!Access control protects resources against unauthorized viewing, tampering, or destruction. They serve as a primary means of ensuring privacy, confidentiality, and prevention of unauthorized disclosure. The first part of Access Control, Authentication, and Public Key Infrastructure defines the components of access control, provides a business framework for implementation, and discusses legal requirements that impact access contol programs. It then looks at the risks, threats, and vulnerabilities prevalent in information systems and IT infrastructures and how to handle them. The final part is a resource for students and professionals which disucsses putting access control systems to work as well as testing and managing them.

Part1 The Need for Access Control Systems
Chapter1 Access Control Framework
Chapter2 Assessing Risk and Its Impact on Access Control
Chapter3 Business Drivers for Access Controls
Chapter4 Access Control Policies, Standards, Procedures, and Guidelines
Chapter5 Unauthorized Access and Security Breaches
Part2 Mitigating Risk with Access Control Systems, Authentication, and PKI
Chapter6 Mapping Business Challenges to Access Control Types
Chapter7 Human Nature, Organizational Behavior, and Considerations
Chapter8 Access Control for Information Systems
Chapter9 Physical Security and Access Control
Chapter10 Access Control in the Enterprise
Part3 Implementing, Testing, and Managing Access Control Systems
Chapter11 Access Control System Implementations
Chapter12 Access Control Solutions for Remote Workers
Chapter13 Public Key Infrastructure and Encryption
Chapter14 Testing Access Control Systems
Chapter15 Access Control Assurance