Official (ISC)2 Guide to the CISSP CBK

Access control is a foundation of information security and assurance. Without access control, the concepts of confidentiality and integrity are a moot point.  Recently, access control is at the forefront of privacy debates.  Who should have access to an individual's private information and what assurance and accountability surround that access? Expect access control to remain a high priority as cloud computing and mobile devices become the "de facto" standard of computing.