Lesson 8 (Canvas)

Tokens

Authorizations issued under single sign-on

Tokens

Avoids need for user to authenticate to each service

Identity provider

Provisions and manages accounts

hiring, working, firing or retiring

• Recruitment (_____)

• Operation (_____)

• Termination/separation (_____)

Onboarding

Welcoming a new employees or contractors to the organization

Non-disclosure Agreement

NDA

Standard operating procedures

SOP

Least privilege

Assign sufficient permissions only; reduce risk from compromised accounts

Job rotation

Distributes institutional knowledge and expertise; reduces critical dependencies

Standard users

Limited privileges, should not be able to change the system configuration, restricted to account profile

Guest accounts

Account with no credentials (anonymous logon)

User-assigned privileges

Assign privileges directly to user accounts; unmanageable if number of users is large

Group-based privileges

Assign permissions to security groups and assign user accounts to relevant groups

Privileged/administrative account

Can change system configuration

Generic administrator/root/superuser

User account with full control over system; key target for attackers

Daemons

Linux accounts to run services

Shared accounts

Accounts whose credentials are known to more than one person

Generic accounts

Accounts created by default on OS install, only account available to manage a device

Group Policy Objects

GPOs

file permissions

Use of ______ to read and modify data

Disablement

Login is disabled until manually reenabled, combine with remote logoff

Re-enabled

Login is prevented for a period and then re-enabled