CISSP Domain 5 Review / Mind Map (1 of 2) | Access Control Overview

Review of the major Access Management concepts and terms, and how they interrelate, to help you review, guide your studies, and help you pass the CISSP exam.

This MindMap review covers:
0:00 Introduction
0:27 Access Controls
1:14 Access Control Principle
1:19 Separation of Duties
1:27 Need to Know
1:35 Least Privilege
1:50 Administration Approaches
2:00 Centralized Approach
2:08 Decentralized Approach
2:16 Hybrid Approach
2:22 Access Control Services
2:37 Identification
2:44 Authentication
2:56 Authentication by Knowledge
3:10 Authentication by Ownership
3:40 Hard Tokens
3:49 Soft Tokens
4:03 Synchronous Tokens
4:16 Asynchronous Tokens
4:38 Authentication by Smart / Memory Cards
4:57 Authentication by Characteristics
5:11 Physiology Characteristics
6:08 Behavioral Characteristics
6:40 Challenging Aspect of Biometric System
7:19 Crossover Error Rate
7:49 Single / Multi-Factor Authentication
8:02 Authenticator Assurance Levels (AAL)
8:20 Authorization
8:34 Discretionary Access
8:54 Rule-based Discretionary Access
9:06 Role-based Discretionary Access
9:13 Attribute / Content-based Discretionary Access
9:31 Non-discretionary Access
9:48 Mandatory Access
10:05 Accountability Access
10:31 Session Management
10:50 Outro

Other MindMaps:

Domain 1

Domain 2

Domain 3

Domain 5

Domain 6

Domain 7

Domain 8

[uroojbaig]

Absolutely the best and smooth explanations given for the CISSP domains. Thank you Rob and Team!

[tendaig]

RBAC and RuBAC are types of Non-discretionary access control.

[fernhbowers]

I so appreciate the Videos...Such a Blessing. I really feel confident that I will PASS 2022!

[alexboccio]

Thank you for the very helpful videos! One thing that may be an error - at ~9:00 you mention RBAC, RuleBAC, and ABAC as discretionary access controls, however the official study guide and other materials I've seen all list these as non-discretionary.

[RajputSaab]

Your videos are gold mine..! thanks for all your efforts :)

[mohammadtaufeeq]

I wish I could give a million likes for each of your videos...thanks a lot dear.

[latinlefty]

Awesome content and method of delivery

[thesamenametwice]

One thing I wish you'd incorporate into these videos are the acronyms. Many times I am getting asked on Learnzapp questions that have a multitude of acronyms that aren't spelled out, and would have gotten them correct had I knew what they initially stood for before attempting the practice tests.

[AlrightIamdone]

Hi Rob, can you please confirm that ABAC and Rule BAC is also discretionary just like you explained that Role-BAC is?

[NajeebMohammed]

Great Content and thanks a lot for your efforts.

[linj]

the Sybex book said that only DAC is discretionary control, and the others including role-based, rule-based, attribute-based, MAC all belongs to the nondiscretionary control. which one should be right?

[davidchan]

Hey, great video. Well organised. Thanks.

[gauravtrivedi]

Thanks so much, really great videos!,


Do have link for remaining domains ?
2 Asset Security
3 Security Architecture and Engineering
4 Communication and Network Security
7 Security Operations
8 Software Development Security
already
1 Security and Risk Management
5 Identity and Access Management (IAM)
6 Security Assessment and Testing

[SegInfoBR]

Hi Rob, congratulations by videos, were excellents. Please advise when domain 4 will be available?

[vikas]

Really helpful and Many thanks, If possible, Could you share for other domains also

[ciscosaeen]

Question. I believe iris scanner is considered to be the most accurate and retina scanner comes second. can you confirm this please.

[jnc]

Is there a place to download the finished map for review?

[thenicefamily]

Just tossed a coin to your Witcher (or 2 coffees). Cheers for this.

[pavanareddy]

Please can you upload Domain 3 and Domain4

[bbizzle]

Hey Rob, am I correct that you don't have any mind map videos of domain 4?