CPA LogoCPA Exam Prep

Authentication and Access Control

Controlling User Access

Authentication verifies a user's identity, while authorization determines the resources and actions that user is permitted to access. Together they protect systems from unauthorized access.

  • Passwords.
  • Multi-Factor Authentication (MFA).
  • Biometric authentication.
  • Role-Based Access Control (RBAC).
  • Least privilege principle.
Note
Multi-Factor Authentication significantly reduces the risk of unauthorized access.
Summary
Strong authentication and proper authorization are essential components of cybersecurity.