{"id":4340,"date":"2017-08-08T11:03:41","date_gmt":"2017-08-08T10:03:41","guid":{"rendered":"https:\/\/cybersmart.co.uk\/?p=4340"},"modified":"2017-08-08T11:03:41","modified_gmt":"2017-08-08T10:03:41","slug":"cyber-security-101-user-access-control","status":"publish","type":"post","link":"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/","title":{"rendered":"Cyber Security 101 &#8211; User Access Control"},"content":{"rendered":"\n\t\t<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained\">\n\t\t<div class=\"wp-block-wombat-hero-blog b-hero-blog has-color-night-100-background-color has-background\" style=\"margin-top:var(--wp--preset--spacing--section-spacing);margin-bottom:var(--wp--preset--spacing--section-spacing)\"><div class=\"b-hero-blog__inner\">\n\t\t<div class=\"wp-block-wombat-hero-blog-text b-hero-blog-text\"><div class=\"b-hero-blog-text__inner\"><h1 style=\"margin-bottom:var(--wp--preset--spacing--size-20);\" class=\"has-text-color has-color-porcelain-100-color wp-block-post-title\">Cyber Security 101 &#8211; User Access Control<\/h1>\n\t\t\n\t\t<div style=\"margin-bottom:var(--wp--preset--spacing--size-16);\" class=\"has-text-color has-color-porcelain-100-color wp-block-post-date has-20-font-size\"><time datetime=\"2017-08-08T11:03:41+00:00\">August 8, 2017<\/time><\/div>\n\t\t\n\t\t<div class=\"has-text-color has-color-porcelain-80-color wp-block-post-author-name\">Jamie<\/div><\/div><\/div>\n\t\t\n\t\t\n\t\t\n\t\t<div class=\"wp-block-wombat-hero-blog-media b-hero-blog-media\"><div class=\"b-hero-blog-media__inner\"><figure style=\"aspect-ratio:16\/9;\" class=\"wp-block-post-featured-image\"><img loading=\"lazy\" decoding=\"async\" width=\"885\" height=\"397\" src=\"https:\/\/cybersmart.com\/wp-content\/uploads\/2017\/08\/Untitled-design-40-1.jpg\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"User Access Control\" style=\"width:100%;height:100%;object-fit:cover;\" srcset=\"https:\/\/cybersmart.com\/wp-content\/uploads\/2017\/08\/Untitled-design-40-1.jpg 885w, https:\/\/cybersmart.com\/wp-content\/uploads\/2017\/08\/Untitled-design-40-1-768x345.jpg 768w, https:\/\/cybersmart.com\/wp-content\/uploads\/2017\/08\/Untitled-design-40-1-200x90.jpg 200w, https:\/\/cybersmart.com\/wp-content\/uploads\/2017\/08\/Untitled-design-40-1-578x259.jpg 578w\" sizes=\"(max-width: 885px) 100vw, 885px\" \/><\/figure><\/div><\/div>\n\t\t<\/div><\/div>\n\t\t<\/div>\n\t\t\n\t\t\n\t\t\n\t\t<section class=\"wp-block-wombat-blog-post-content-container b-blog-post-content-container\" style=\"margin-bottom:var(--wp--preset--spacing--section-spacing)\"><div class=\"b-blog-post-content-container__inner l-container\">\n\t\t<div class=\"wp-block-wombat-blog-post-sidebar b-blog-post-content-container__sidebar sidebar\"><div class=\"sidebar__inner\">\n\t\t<div class=\"wp-block-wombat-blog-post-sidebar-col-1 sidebar__col-1\"><div class=\"sidebar__col-inner\">\n\t\t<div class=\"wp-block-button is-style-secondary\"><a class=\"wp-block-button__link wp-element-button\" href=\"\/blog\/\" style=\"margin-top:0;margin-bottom:var(--wp--preset--spacing--size-16)\">Back to blog<\/a><\/div>\n\t\t\n\t\t\n\t\t\n\t\t<p class=\"has-20-font-size\" style=\"margin-top:0;margin-bottom:var(--wp--preset--spacing--size-16)\"><strong>Table of contents<\/strong><\/p>\n\t\t\n\t\t\n\t\t\n\t\t<div class=\"wp-block-wombat-blog-post-toc b-toc b-toc--1\" data-nest=\"1\"><\/div>\n\t\t<\/div><\/div>\n\t\t\n\t\t\n\t\t\n\t\t<div class=\"wp-block-wombat-blog-post-sidebar-col-1 sidebar__col-1\"><div class=\"sidebar__col-inner\">\n<div class=\"wp-block-wombat-resource-box-container-box b-resource-box-container-box swiper-slide has-color-night-100-background-color has-background\"><div class=\"b-resource-box-container-box__inner\">\n<h2 class=\"wp-block-heading is-style-3 has-color-porcelain-100-color has-text-color\" style=\"margin-bottom:var(--wp--preset--spacing--size-16)\">Want to speak with sales?<\/h2>\n\n\n\n<div class=\"wp-block-button is-style-text-blue-2\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/calendly.com\/sales_cs\/book-a-discovery-call-v2?utm_source=blogglobal\">Book a call<img loading=\"lazy\" decoding=\"async\" width=\"24\" height=\"24\" class=\"wp-image-769\" style=\"width: 24px;\" src=\"https:\/\/cybersmart.com\/wp-content\/uploads\/2024\/03\/arrow-right.svg\" alt=\"\"><\/a><\/div>\n<\/div><\/div>\n<\/div><\/div>\n\t\t<\/div><\/div>\n\t\t\n\t\t\n\t\t\n\t\t<div class=\"wp-block-wombat-blog-post-content b-blog-post-content-container__content content\"><div class=\"content__inner\">\n<p>Cybersecurity and data protection can be confusing. There&#8217;s a wealth of information out there, but what&#8217;s good advice and what&#8217;s bad? And how do you get started once you know what you need to do? At CyberSmart, we believe that Cyber Security should be accessible and easy for everyone. So, we&#8217;ve put together a set of simple guides to help you get started, this time we&#8217;re talking user access control.<\/p>\n\n\n\n<!--more-->\n\n\n\n<h3 class=\"wp-block-heading\">What is user access control?<\/h3>\n\n\n\n<p>Companies implement user access policies to regulate who can access the companies information or IT systems and outline the associated access privileges for users. The purpose of these policies\/procedures is to prevent unauthorised access to your companies information and systems. Makes sense, right?<\/p>\n\n\n\n<p>In reality, lots of companies don&#8217;t have formal user access policies or guidelines in place. Why? Because they don&#8217;t know what to do and where to start.<\/p>\n\n\n\n<p>We at CyberSmart like to use a new starter as a reference point to make sure we cover everything in the user account lifecycle from the initial set up to changing job roles and ultimately, leaving the company.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Registration<\/h3>\n\n\n\n<p>Once a new starter joins, you will likely create a new user profile for his workstation, email account, data storage programs, cloud software, applications, etc. The best question to ask at this point is: What access does the user need to perform her day to day job?<\/p>\n\n\n\n<p>Uncontrolled access to everything can be handy. We have seen many companies where everyone has access to everything, meaning that the risk is much higher to suffer a data breach because information can get lost, misused or get into the wrong hands.<\/p>\n\n\n\n<p>Therefore, it is recommended to give your new starter less access to information initially. Over time you will both figure out what they need to do their job, and it is always easier to give more access later on than to review and remove access rights &#8211; think of shared Dropbox folders.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">User identification<\/h3>\n\n\n\n<p>Every user should access your system with a unique user ID (such as email address or username) and a unique password. It is not recommended to have shared accounts as there is a lack of transparency and traceability in case of a data breach. If you have a business case for shared user credentials, we recommend using a password manager that stores login details and can be used by the entire team.<\/p>\n\n\n\n<p>Once you have created new profiles, encourage your user to change the password to a strong password. A strong password is at least eight characters long, difficult to guess and consists of a combination of upper and lower case letters, numbers and special characters, like &#8220;2;u{DNG7Gbp&#8221;.<\/p>\n\n\n\n<p>A difficult password to guess is also a difficult password to remember. Again, using a password manager solves this problem.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Ongoing user access management<\/h3>\n\n\n\n<p>An admin\/founder\/team leader should review your companies users and their access rights on a regular basis, ideally every six months or when a significant change to the business occurs. A simple spreadsheet or list is useful to have an overview and track users and their rights. In your CyberSmart Admin dashboard, you can see all your users and their rights, to make your job easier.<\/p>\n\n\n\n<p>It is your user&#8217;s responsibility to prevent their user ID and password from being misused, which means that you should communicate that:<\/p>\n\n\n\n<ul>\n<li>Users should not share their credentials<\/li>\n\n\n\n<li>Users should store passwords in a secure place like a password manager and not on a sticky note on the screen<\/li>\n\n\n\n<li>Change passwords when they believe they may have been compromised<\/li>\n\n\n\n<li>Not give external parties access to your companies systems<\/li>\n\n\n\n<li>Notify the admin\/founder\/team leader when they change roles and need different access privileges.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">User deregistration<\/h3>\n\n\n\n<p>Once a team member leaves your company, make sure to remove all access rights immediately, ideally on their last day at work.<\/p>\n\n\n\n<p>Back in our consultancy days, we have worked with a company where a bad leaver left the business on a Friday, and over the weekend he managed to transfer a significant amount of data outside of the company. The company didn&#8217;t revoke his access and didn&#8217;t notice it for months. Later, they had to report an incident and notify it is customers months after the employee left.<\/p>\n\n\n\n<p>In case you need someone&#8217;s old user credentials, make sure that you change the password immediately after the person left your company.<\/p>\n\n\n\n<p>If you have any questions around User Access Control or Cyber Security in general or just want to have a chat, drop us a line at hello@cybersmart.co.uk.<\/p>\n\n\n\n<p>Looking to improve your cybersecurity but not sure where to begin? Start by getting certified in&nbsp;<a href=\"https:\/\/cybersmart.co.uk\/solutions\/\" target=\"_blank\" rel=\"noopener noreferrer\">Cyber Essentials<\/a>, the UK government scheme that covers all the fundamentals of cyber hygiene.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><a href=\"https:\/\/cybersmart.co.uk\/solutions\/\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-6308 size-full\" src=\"https:\/\/cybersmart.co.uk\/wp-content\/uploads\/2020\/08\/CTA-button-2.png\" alt=\"CTA button\" width=\"820\" height=\"312\"><\/a><\/h4>\n<\/div><\/div>\n\t\t<\/div><\/section>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":3,"featured_media":6667,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[15,26],"tags":[21,22,56,103],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Cyber Security 101 - User Access Control - CyberSmart<\/title>\n<meta name=\"description\" content=\"What does user access control mean? And what do you need to do to ensure your business is doing it right?\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cyber Security 101 - User Access Control - CyberSmart\" \/>\n<meta property=\"og:description\" content=\"What does user access control mean? And what do you need to do to ensure your business is doing it right?\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/\" \/>\n<meta property=\"og:site_name\" content=\"CyberSmart\" \/>\n<meta property=\"article:published_time\" content=\"2017-08-08T10:03:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cybersmart.com\/wp-content\/uploads\/2017\/08\/Untitled-design-40-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"885\" \/>\n\t<meta property=\"og:image:height\" content=\"397\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jamie\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jamie\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/\",\"url\":\"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/\",\"name\":\"Cyber Security 101 - User Access Control - CyberSmart\",\"isPartOf\":{\"@id\":\"https:\/\/cybersmart.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cybersmart.com\/wp-content\/uploads\/2017\/08\/Untitled-design-40-1.jpg\",\"datePublished\":\"2017-08-08T10:03:41+00:00\",\"dateModified\":\"2017-08-08T10:03:41+00:00\",\"author\":{\"@id\":\"https:\/\/cybersmart.com\/#\/schema\/person\/5f23eb4b6bf763170a51147370df2a04\"},\"description\":\"What does user access control mean? And what do you need to do to ensure your business is doing it right?\",\"breadcrumb\":{\"@id\":\"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/#primaryimage\",\"url\":\"https:\/\/cybersmart.com\/wp-content\/uploads\/2017\/08\/Untitled-design-40-1.jpg\",\"contentUrl\":\"https:\/\/cybersmart.com\/wp-content\/uploads\/2017\/08\/Untitled-design-40-1.jpg\",\"width\":885,\"height\":397,\"caption\":\"User Access Control\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cybersmart.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cyber Security 101 &#8211; User Access Control\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cybersmart.com\/#website\",\"url\":\"https:\/\/cybersmart.com\/\",\"name\":\"CyberSmart\",\"description\":\"Complete Cyber Confidnence\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cybersmart.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cybersmart.com\/#\/schema\/person\/5f23eb4b6bf763170a51147370df2a04\",\"name\":\"Jamie\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cybersmart.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4c8629de96048c65a367ce1066968a8f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4c8629de96048c65a367ce1066968a8f?s=96&d=mm&r=g\",\"caption\":\"Jamie\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cyber Security 101 - User Access Control - CyberSmart","description":"What does user access control mean? And what do you need to do to ensure your business is doing it right?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/","og_locale":"en_US","og_type":"article","og_title":"Cyber Security 101 - User Access Control - CyberSmart","og_description":"What does user access control mean? And what do you need to do to ensure your business is doing it right?","og_url":"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/","og_site_name":"CyberSmart","article_published_time":"2017-08-08T10:03:41+00:00","og_image":[{"width":885,"height":397,"url":"https:\/\/cybersmart.com\/wp-content\/uploads\/2017\/08\/Untitled-design-40-1.jpg","type":"image\/jpeg"}],"author":"Jamie","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Jamie","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/","url":"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/","name":"Cyber Security 101 - User Access Control - CyberSmart","isPartOf":{"@id":"https:\/\/cybersmart.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/#primaryimage"},"image":{"@id":"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/#primaryimage"},"thumbnailUrl":"https:\/\/cybersmart.com\/wp-content\/uploads\/2017\/08\/Untitled-design-40-1.jpg","datePublished":"2017-08-08T10:03:41+00:00","dateModified":"2017-08-08T10:03:41+00:00","author":{"@id":"https:\/\/cybersmart.com\/#\/schema\/person\/5f23eb4b6bf763170a51147370df2a04"},"description":"What does user access control mean? And what do you need to do to ensure your business is doing it right?","breadcrumb":{"@id":"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/#primaryimage","url":"https:\/\/cybersmart.com\/wp-content\/uploads\/2017\/08\/Untitled-design-40-1.jpg","contentUrl":"https:\/\/cybersmart.com\/wp-content\/uploads\/2017\/08\/Untitled-design-40-1.jpg","width":885,"height":397,"caption":"User Access Control"},{"@type":"BreadcrumbList","@id":"https:\/\/cybersmart.com\/2017\/08\/cyber-security-101-user-access-control\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cybersmart.com\/"},{"@type":"ListItem","position":2,"name":"Cyber Security 101 &#8211; User Access Control"}]},{"@type":"WebSite","@id":"https:\/\/cybersmart.com\/#website","url":"https:\/\/cybersmart.com\/","name":"CyberSmart","description":"Complete Cyber Confidnence","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cybersmart.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cybersmart.com\/#\/schema\/person\/5f23eb4b6bf763170a51147370df2a04","name":"Jamie","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersmart.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4c8629de96048c65a367ce1066968a8f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4c8629de96048c65a367ce1066968a8f?s=96&d=mm&r=g","caption":"Jamie"}}]}},"_links":{"self":[{"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/posts\/4340"}],"collection":[{"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/comments?post=4340"}],"version-history":[{"count":0,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/posts\/4340\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/media\/6667"}],"wp:attachment":[{"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/media?parent=4340"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/categories?post=4340"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/tags?post=4340"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}