A security process that provides identification, authentication, and authorization for users, computers, and other entities in systems.

A security process that provides identification, authentication, and authorization for users, computers, and other entities in systems.

• A. Non-repudiation
• B. Security controls
• C. Identity and access management (IAM)
• D. Integrity

Answer: (C)

Identity and access management (IAM) is the security practice that handles who can access what in a system by combining identification, authentication, and authorization. Identification is when an entity presents who they claim to be (like a user name or device ID). Authentication then verifies that claim, using methods such as passwords, tokens, or biometrics. Once verified, authorization determines the permissions or rights the entity has to access resources or perform actions, based on roles, policies, or access controls. IAM is distinct from non-repudiation, which guarantees a sender’s or actor’s involvement in a transaction, and from security controls in general or data integrity, which don’t describe the full process of proving identity and granting access.

Identity and access management (IAM) is the security practice that handles who can access what in a system by combining identification, authentication, and authorization. Identification is when an entity presents who they claim to be (like a user name or device ID). Authentication then verifies that claim, using methods such as passwords, tokens, or biometrics. Once verified, authorization determines the permissions or rights the entity has to access resources or perform actions, based on roles, policies, or access controls. IAM is distinct from non-repudiation, which guarantees a sender’s or actor’s involvement in a transaction, and from security controls in general or data integrity, which don’t describe the full process of proving identity and granting access.