Trust Models: Trust Me, I m a Good Person

 < Day Day Up > 



Trust Models: Trust Me, I'm a Good Person

There are three trust models described here:

  1. Trust everyone all of the time. It is the easiest trust policy model to follow, but not practical and definitely not sensible. Some businesses stopped following this model after they discovered their trusted employees had looted the company's bank accounts.

  2. Trust no one at any time. This is the most restrictive policy and also one that is not practical. Some organizations attempt to function on this model, but do not function very well.

  3. Trust some people some of the time. This model emphasizes caution in providing access to critical assets on an as-needed basis and only in sufficient amounts permitting employees to do their jobs. Controls are instituted ensuring trust is not violated. Usually the most-favored model is one that requires a bare minimum of privilege and as trust is gradually built, privilege escalates.



 < Day Day Up > 



Critical Incident Management
Critical Incident Management
ISBN: 084930010X
EAN: 2147483647
Year: 2004
Pages: 144

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net