ISC2 CISSP Certified Information Systems Security Professional Official Study Guide

by Mike Chapple

Authorization is usually defined using one of the models of access control, such as Discretionary Access Control (DAC), Mandatory Access Control (MAC), or Role Based Access Control (RBAC or role-BAC);