What is an InfoSec framework? What is an InfoSec blueprint?. What is a security model? How might an InfoSec professional use a security model? What is access control?
What are the essential processes of access control? What are the key principles on which access control is founded?