View source for Discretionary Access Control (DAC)

Discretionary Access Control (DAC) is a type of access control system that allows the owner or administrator of a system to determine who is authorized to access specific resources or data. In a DAC system, the owner or administrator has discretion over who can access specific resources or data, and can grant or revoke access privileges as needed.

The components of Discretionary Access Control typically include the access control lists (ACLs) that define who is authorized to access specific resources or data, and the security policies and procedures that govern the management of access privileges. In addition, DAC may also include authentication and authorization mechanisms to ensure that only authorized users are granted access.

The importance of Discretionary Access Control lies in its ability to provide a flexible and adaptable access control system that can be tailored to the needs of individual users and organizations. By allowing owners and administrators to determine who is authorized to access specific resources or data, DAC can help to ensure the security and confidentiality of sensitive information and resources.

The history of Discretionary Access Control can be traced back to the early days of computer security, when researchers first began to develop access control systems to protect sensitive information and resources. Since then, the concept of DAC has been refined and expanded upon by a wide range of security professionals and researchers.

The benefits of using Discretionary Access Control include its flexibility and adaptability, its ability to support the management of access privileges for sensitive information and resources, and its compatibility with a wide range of security policies and procedures. Additionally, DAC can help organizations to comply with regulatory requirements related to data security and privacy.

However, there are also potential drawbacks to consider, including the risk of human error or abuse in the management of access privileges, and the potential for conflicts between different access control policies and procedures.

Some examples of applications of Discretionary Access Control include the management of access privileges for sensitive financial or medical information, the control of access to secure facilities or networks, and the management of access to confidential research or intellectual property. In each of these cases, the use of DAC plays a key role in enabling more effective and secure access control.


== See Also ==
*[[IT Strategy (Information Technology Strategy)]]
*[[IT Governance]]
*[[Enterprise Architecture]]
*[[Chief Information Officer (CIO)]]
*[[IT Sourcing (Information Technology Sourcing)]]
*[[IT Operations (Information Technology Operations)]]
*[[E-Strategy]]






== References ==
<references />