Summary of CISSP Domain 5 Review / Mind Map (1 of 2) | Access Control Overview

00:00:00 - 00:10:00

This video provides a review of the key concepts in Domain 5 of the CISSP exam, covering topics such as access control, authentication, and authorization. It also introduces the concept of session management and highlights some of the risks associated with it.

• 00:00:00 This video provides a mind map of the Domain 5 access management concepts, including separation of duties, minimum privileges, one-time passwords, and authentication by knowledge (password).
• 00:05:00 The video reviews the three factors of authentication - knowledge, ownership, and characteristic - and introduces the concepts of authorization and access control. It describes the three access control philosophies: discretionary, role-based, and attribute-based.
• 00:10:00 The video reviews domain 5, which includes access control. The video discusses the principle of access control, which is accountability. It also discusses session management, which is important for securing user sessions. One risk to be concerned with is session hijacking.