Certified in Cybersecurity — Lesson 3: Physical Access, Logical Access, Authentication, Authorization, and Accountability

Learning Objectives

• Translate physical access, logical access, and authentication factors into actions that can be implemented and verified.
• Compare viable approaches to authorization principles and record the trade-offs affecting accountability and logging.
• Resolve the exception in which shared credentials and informal visitor practices make actions impossible to attribute without creating a new control gap.

Detailed Topics

• Evaluate physical access against policy, risk appetite, architecture constraints, and measurable acceptance criteria.
• Use logical access to resolve a course-specific decision and record why rejected options were not selected.
• Inspect authentication factors for hidden assumptions, inherited responsibilities, and downstream operational effects.
• Translate authorization principles into a repeatable workflow that another practitioner can review and operate.
• Test accountability and logging for normal behavior, boundary conditions, and an adverse scenario relevant to the lesson.

Instructor Demonstration

The instructor reviews the available facts, builds the required artifacts, and challenges the proposed solution. Particular attention is given to which access method, approval, and evidence are appropriate for each situation and the warning signs that appear when shared credentials and informal visitor practices make actions impossible to attribute.

Hands-On Exercise

Work through the scenario and review access for staff, visitors, contractors, and administrators. Your evidence package must include the access-control map.

1. Inventory the facts, assets, stakeholders, constraints, and evidence relevant to physical access.
2. Perform the core analysis for logical access and authentication factors, recording assumptions and rejected options.
3. Introduce the adverse condition where shared credentials and informal visitor practices make actions impossible to attribute and revise the proposed response.
4. Complete the access-control map with ownership, acceptance criteria, residual concerns, and the next review date.

Scenario Analysis

• Identify which assumption has the greatest effect on which access method, approval, and evidence are appropriate for each situation.
• Compare two viable approaches involving authorization principles and explain their security and operational trade-offs.
• Specify the evidence required before the access-control map can be accepted.

Troubleshooting Guidance

Investigate the exception by comparing the documented design with observed behavior and retained evidence. Test one factor at a time, especially where shared credentials and informal visitor practices make actions impossible to attribute, and record why the corrective action addresses the root cause.

Validation Checklist

• The scope and ownership for physical access are explicit and agreed.
• The selected treatment for logical access is supported by scenario evidence rather than assumption.
• The exception involving shared credentials and informal visitor practices make actions impossible to attribute was tested and its impact was recorded.
• The access-control map identifies acceptance criteria, residual risk, responsible owners, and follow-up actions.

Lesson Outcome

Learners can apply Physical Access, Logical Access, Authentication, Authorization, and Accountability, explain which access method, approval, and evidence are appropriate for each situation, and support the conclusion with a reviewable access-control map.