Access Control Course

Lesson 1 • What Access Control Means

Defines access control and its role in protecting assets. Grounds all subsequent technical content in a shared conceptual baseline.

Lesson 2 • Access Control Lifecycle Overview

Presents provisioning, review, and revocation as a continuous cycle. Sets expectations for the end-to-end management process explored throughout the course.

Lesson 3 • Threats Addressed by Access Control

Surveys insider threats, external attackers, and accidental misuse. Connects threat categories to specific control countermeasures introduced later.

Lesson 4 • Access Control Categories and Types

Distinguishes physical, logical, and administrative controls. Learners map control types to real organisational scenarios.

Lesson 1 • Password and Credential Management

Addresses password policies, storage, and credential hygiene. Establishes secure credential practices that underpin all authentication systems.

Lesson 2 • Authentication Factors and Methods

Explains something-you-know, have, and are factors. Learners match factor types to threat scenarios requiring different assurance levels.

Lesson 3 • Single Sign-On and Federation

Introduces SSO architectures and federated identity protocols. Shows how centralised authentication reduces credential sprawl across systems.

Lesson 4 • Multi-Factor Authentication Design

Examines combining factors to raise assurance without degrading usability. Directly applies factor knowledge to practical MFA deployment decisions.

Lesson 1 • Mandatory Access Control

Covers label-based, policy-enforced access in MAC environments. Connects MAC to high-assurance scenarios requiring strict information flow control.

Lesson 2 • Attribute-Based Access Control

Introduces policy-as-code using subject, resource, and environment attributes. Demonstrates ABAC's flexibility for dynamic, context-sensitive decisions.

Lesson 3 • Role-Based Access Control

Teaches role definition, assignment, and hierarchy in RBAC. Learners design role structures that minimise privilege creep in enterprise environments.

Lesson 4 • Policy Design and Conflict Resolution

Addresses writing clear access policies and resolving conflicting rules. Ensures learners can produce enforceable, auditable policy documents.

Lesson 1 • Physical Credential Technologies

Surveys keys, cards, fobs, and biometric readers. Learners select credential technologies matched to zone sensitivity and throughput requirements.

Lesson 2 • Electronic Access Control Systems

Covers controllers, panels, and door hardware integration. Connects credential technologies to the electronic infrastructure that enforces access decisions.

Lesson 3 • Surveillance and Detection Integration

Integrates CCTV, motion sensors, and alarms with access systems. Shows how detection layers compensate for control bypass attempts.

Lesson 4 • Visitor and Contractor Management

Establishes processes for temporary access granting and escort requirements. Addresses the high-risk gap between permanent staff and transient personnel.

Lesson 1 • Application-Level Access Controls

Examines session management, API authorisation, and in-app permission enforcement. Extends access control into the application layer where business logic resides.

Lesson 2 • Network Access Control

Addresses segmentation, firewall rules, and network admission control. Learners design network-layer controls that restrict lateral movement.

Lesson 3 • Database Access Control

Covers database user privileges, views, and row-level security. Protects sensitive data at the storage layer independent of application controls.

Lesson 4 • Operating System Access Controls

Covers file permissions, user accounts, and privilege management on OS platforms. Grounds logical control implementation in the most fundamental enforcement layer.

Lesson 1 • Segregation of Duties Controls

Identifies conflicting permission combinations and enforces separation. Prevents fraud and error by ensuring no single user controls an entire sensitive process.

Lesson 2 • Access Certification and Recertification

Covers periodic review campaigns where managers validate user entitlements. Detects privilege creep and ensures ongoing compliance with least-privilege policy.

Lesson 3 • Joiner-Mover-Leaver Processes

Defines access actions triggered by hiring, role changes, and departures. Ensures access rights stay synchronised with employment status throughout the lifecycle.

Lesson 4 • Role Engineering and Management

Teaches top-down and bottom-up role mining and maintenance. Produces a clean, maintainable role catalogue that reduces administrative overhead.

Lesson 1 • Access-Related Incident Response

Applies incident response phases specifically to unauthorised access events. Learners execute containment and eradication steps that stop ongoing access abuse.

Lesson 2 • Reporting and Metrics

Defines key access control metrics and reporting cadences for leadership. Converts operational data into governance-level visibility and decision support.

Lesson 3 • Monitoring and Anomaly Detection

Applies behavioural baselines and alerting rules to identify suspicious access. Translates raw log data into actionable security intelligence.

Lesson 4 • Access Logging and Log Management

Defines what access events to log, where to store them, and how long to retain them. Creates the evidentiary foundation for all detection and investigation activities.

Lesson 1 • Access Control Strategy and Roadmap

Synthesises course content into a strategic improvement roadmap. Learners assess current-state maturity and prioritise investments for maximum risk reduction.

Lesson 2 • Adaptive and Risk-Based Access Control

Introduces dynamic access decisions driven by real-time risk signals. Enables context-aware enforcement that tightens or relaxes access based on current conditions.

Lesson 3 • Zero Trust Architecture Principles

Deconstructs never-trust-always-verify as an architectural philosophy. Learners redesign access assumptions to eliminate implicit trust in networks and users.

Lesson 4 • Decentralised Identity and Verifiable Credentials

Explores self-sovereign identity and cryptographic credential verification. Prepares learners for identity models that shift control from central authorities to users.