Index

A

AAA (authentication, authorization, accounting), 5–6

acceptable use policies, 525

access control

authentication. See authentication

best practices, 310–313

physical security, 267–271

biometric readers, 270–271

building security, 267–268

door access systems, 268–270

server room security, 267–268

policies, 322–325

UAC (User Account Control), 325–326

usernames/passwords, 318–322

users, groups, permissions, 313–317

access control lists (ACLs), 154, 315

access control models, 306–313

centralized versus decentralized, 310

DAC (discretionary access control), 306–308

MAC (mandatory access control), 308–309

RBAC (role-based access control), 309–310

Account lockout threshold, 324

accounting, 6

accounts

Administrator accounts, passwords for, 321

default accounts, 234–235