Notes

Organization shall enforce the authentication and access to both resources and information or data. Resources can be included as users or process associated with those users. Based on the requirements there can be multiple control enhancements or levels of authorizations/ controls. Few of the access control authorizations can be as below.
Dual authorization is one of the access enforcements, that would be simple two step verification or authorization by two levels of users or accounts. Mandatory access controls, this system enforces all the users with specified granted access and are restricted to few functions. By mandating the access, constraints are given to users and same privilege cannot be passed to other users. All the users are confined to the given rights and privileges and special grants might be needed in case any extra permissions. Security Relevant Information shall be another control enforcement, it restricts un authorized or security breach from happening. Security related protection could include encapsulation of the code or abstracting the data or cryptography or masking data, etc., Such protection can protect system from crashing or failure. Role based access control is another important access enforcement control. It shall be applied to organization to organize access based on account types, it can be either based on organization roles or resources, etc.,