Access Controls
Access Controls are the mechanisms that enforce who may perform which action on which resource — from directory permissions and network rules to application-level authorization.
What is Access Controls?
Definition
Access Controls are the mechanisms that turn an access policy into something a system actually enforces: directory permissions, network rules, application authorization and restrictions at the data layer. They answer a narrower question than authentication — not who is this, but what may this identity do here. In cybersecurity they are what limits the reach of a compromised account, which is why least privilege and periodic permission reviews matter more than any single product.
Role in cybersecurity
Access Controls plays an important role in building organizational resilience against cyber threats. Implementing appropriate mechanisms in this area is required by regulations such as NIS2, DORA and ISO 27001.