cisco certification registration

cisco certification registration.Access Review: Access is reviewed on an ongoing basis to avoid privilegecreep o Access Revocation: Access to a specific resource is revoked on demand, for example, because the account has expired. This brings us to a more detailed review of the above 4 phases.1. Registration and AuthenticationThe first step in the secure identity lifecycle is user registration. In this step, the user registers his or her information and requests an identity. The second step is identity verification, which can be accomplished in a variety of ways, depending on the privileges tied to the identity. For example, verifying the identity of a user who is a system administrator may require more steps than that of a normal user.5.2 Introduction to Identity and Access Management 233Steps. During the registration and identity verification phase, the user may be asked to provide a copy of their ID, HR may do a background check on the user, and the user may be asked to submit documentation for specific access permissions, etc. Ultimately, the user will be given a unique and non-descriptive identity.2. Permission openingOnce the identity has been registered, permissions or access rights should be opened for the identity (account). Permissions should be assigned in accordance with the three security principles described earlier in this book (the principle of least privilege, the principle of separation of duties, and the principle of need-to-know confidentiality). In general, each organization will follow its own established network security system when assigning permissions.In the process of opening permissions, it is necessary to ensure that authorization requests are sent to the resource owner and that permissions are not assigned until the authorization request has been approved, which varies with the access control model used by each unit. In addition, time limits should be imposed on the permissions assigned.Formal processes need to be established to open highly sensitive permissions. Let's say, for example, have users sign specific confidentiality agreements. The permission opening process should apply equally to existing accounts requesting access to other resources, for example, if new permissions need to be opened due to a user position change.Note: Registration, identity verification and permission opening can be combined within the account opening steps.