Managing access to confidential data is a major issue for most organizations. The security of sensitive data is often related to trust of customers and therefore, it is more crucial to safeguard against misuse. Any information that could identify an individual needs to be controlled by policies that prevent identity fraud, the compromise of accounts or systems, and other serious consequences. To reduce the risk and reduce the chance of a breach access to sensitive information should be restricted based on authorization based on role.
There are numerous models for granting access to sensitive information. The most basic model, discretionary access controls (DAC) allows an administrator or owner to choose who has access to files and what actions they can take. This is the default setting in Windows, macOS and UNIX filesystems.
Access control based on role is a more secure and secure method. This model aligns privileges to the specific requirements of each job. It also implements important safety rules, like the separation of privileges as well as the principle of minimal privilege.
Fine-grained access control goes far beyond RBAC by allowing administrators to assign permissions in accordance with an individual’s identity. It is based on something you know, like an account number or password; something you own like keys, access cards, or devices that generate codes; and something that you are, such as a fingerprint, iris scan or voice print. This provides greater control and can help eliminate a variety of common authorization issues, like unmonitored access from former employees or access to sensitive data via third-party apps.
https://technologyform.com/boardroom-technologies-how-we-change-with-the-times/