Which layer focuses on managing and controlling user access to an organization's systems, applications, and data?

Which layer focuses on managing and controlling user access to an organization's systems, applications, and data?

• A. Layer 1 - Mission Critical Assets/User Access Management
• B. Layer 2 - Data Security
• C. Layer 4 - Endpoint Security
• D. Layer 7 - The 'Human' or Physical Layer

Answer: (A)

Identity and access management is the practice of ensuring the right individuals gain access to the right resources at the right time. The layer described focuses on controlling who can reach the organization’s systems, applications, and data by implementing authentication, authorization, and accounting, applying least privilege and role-based access control, and managing privileged access. This is foundational because proper access control prevents unauthorized users from reaching resources, even if the data or devices are protected in other ways. Data security, endpoint security, and the human/physical layer address protecting data itself, securing devices, and managing human and physical risks, respectively. The layer that handles user access management is the one aligned with controlling and granting appropriate access to resources.

Identity and access management is the practice of ensuring the right individuals gain access to the right resources at the right time. The layer described focuses on controlling who can reach the organization’s systems, applications, and data by implementing authentication, authorization, and accounting, applying least privilege and role-based access control, and managing privileged access. This is foundational because proper access control prevents unauthorized users from reaching resources, even if the data or devices are protected in other ways. Data security, endpoint security, and the human/physical layer address protecting data itself, securing devices, and managing human and physical risks, respectively. The layer that handles user access management is the one aligned with controlling and granting appropriate access to resources.