Summary
To provide an access management solution that maintains the levels of confidentiality, integrity, and availability you need, consider the AAA framework, which includes authentication, authorization, and accounting:
Authentication is about proving the identity of someone or something.
Something you know is authentication based on knowledge.
Something you have is authentication based on possession.
Something you are is authentication based on unique aspects of yourself and relies on biometrics.
Somewhere you are is authentication based on location.
Something you do is authentication based on habits and characteristics.
Time is authentication based on the time of day and/or day of the week.
MFA is about using two or more factors for authentication.
Authorization is the process of granting and controlling what an authenticated user is able to do.
The least-privilege principle says to give users the minimum permissions they need to accomplish their objectives.
The need-to-know principle says to give users access only to what they absolutely need to do their jobs and perform their roles.
The implicit-deny principle says to ensure that everyone is prevented from doing everything unless explicitly allowed.
Accounting is about keeping track of who, what, where, when, why, and how. It is the process of monitoring, recording, and auditing everything in an organization.
A SIEM solution helps you collect logs, consolidate logs, correlate logs, and get notified about abnormalities/threats in logs that are in breach of established policies.
A SOAR tool helps you automate responses and reduce the amount of human intervention required when an abnormality/threat has been detected.
Remote Authentication Dial-In User Service (RADIUS) is a client/server protocol used with authentication, authorization, and accounting.