Security, risk and accountable access

≈ 42 min

Security, risk and accountable access

Security protects confidentiality, integrity and availability. A defensible control follows a stated risk: identify the asset, threat, weakness and harm, then choose prevention, detection or recovery that changes that risk.

Reasoning routine. State the information available, the rule to apply, the result required and one boundary or failure case.

Worked example. Marks need integrity. Separate account roles, an audit trail and tested backups address different risks: who may change a mark, how a change is investigated and how data is recovered.

Which statement best reflects this lesson's least privilege?

Give each account only the access needed for its current task.

Use a vague rule and trust the first result.

Ignore boundary cases and hidden assumptions.

Choose a tool before stating the problem.

Write the key term for this lesson: least privilege.

A school system needs a reliable next step. Which choice is most defensible for this topic?

Give a learner assistant read-and-print access without permission to edit attendance records.

Store an unexplained guess and call it evidence.

Give every account unrestricted access.

Hide the error so the report looks complete.

A learner can repeat a definition from Security, risk and accountable access. Which next task gives stronger evidence of mastery?

Apply the idea to an unfamiliar boundary, error or decision and justify the choice.

Repeat the lesson title without using the concept.

Choose the first option before reading the scenario.

Hide an unexpected result so the answer appears tidy.