Operational Security and Access Controls

This week’s topics

Operational Security and Access Controls

1. Role-based access controls (RBAC)
2. Strong authentication and password policies
3. Encryption of data at rest and in transit
4. Secure disposal and certified shredding methods
5. Simple steps to protect your information from cyber criminals - strong passwords.
6. Authentication and Access - CompTIA A+ 220-1202 - 2.1
7. Encryption Technologies - CompTIA Security+ SY0-701 - 1.4
8. Encryption tools to protect communication

What you will be able to do

• 2.1 Describe how manual and electronic information storage systems are securely maintained.
• 2.2 Describe practices that ensure security when storing and accessing information.

Activity

Start with this week’s 4 videos, then: Seminar, guided reading and a short written task: describe how manual and electronic information storage systems are securely maintained.

Study materials

Videos

• Simple steps to protect your information from cyber criminals - strong passwords. · YouTube · Information Commission's Office (ICO) · 4 min · for registered students
• Authentication and Access - CompTIA A+ 220-1202 - 2.1 · YouTube · Professor Messer · 12 min · for registered students
• Encryption Technologies - CompTIA Security+ SY0-701 - 1.4 · YouTube · Professor Messer · 7 min · for registered students
• Encryption tools to protect communication · Oak National Academy, Key Stage 4 (GCSE level) · for registered students

Further resources

• NCSC: Secure sanitisation and disposal of storage media · PDF · NCSC, guidance; 8 pages · for registered students
• NCSC: Introduction to identity and access management · PDF · NCSC, guidance; 5 pages · for registered students
• Workplace Software and Skills, 1.4: Password Management and Biometrics · PDF · OpenStax, textbook chapter; p. 47 · for registered students