|
Access Control
Access Control deals with the internal security policy of your application.
For example, enabling the sales department the ability to see only sales
data is an access control. Access controls can be misconfigured and need to
be checked and verified.
Identification/Password Control
Mechanisms and Controls for processes such as password creation and account
expiration. For example, an account which has not been used in six months
should be deactivated. Another example is that passwords should at least be
eight characters long with at least one number in it.
|
Securing Critical Databases with DbProtect
