User access levels

Common prevention methods: User access levels

1.4.2 Identifying and preventing vulnerabilities

Identifying and preventing vulnerabilities — Note 5 of 8

What you need to know

User access levels control what data and features different users can access within a system. By limiting access to only what each user needs, the risk of misuse or damage from compromised accounts is reduced.

What to know

Users only have access to what they NEED — this is the principle of 'least privilege'.
Reduces the risk of insider threats and accidental changes.
If a low-level account is compromised, the damage is limited because it has restricted access.

Key terms

Exam tipCommon mistake

User Access Levels: Controls that determine what data and features different users can access. E.g. admin has full access; standard users have limited access.
Exam tip: User access levels limit damage from BOTH insider threats AND external breaches of low-level accounts.

Ready to test yourself?

Practise 1.4.2 questions

← Previous noteFirewalls1.4.2 Identifying and preventing vulnerabilities Next note →Passwords1.4.2 Identifying and preventing vulnerabilities

Back to Identifying and preventing vulnerabilities

Revise another OCR GCSE topic: Threats to computer systems and networks