CISSP Access Control Matrix
Identify privilege violations in this RBAC matrix (hover cells for explanations):
classDiagram
class FinancialSystem {
+Accounting
+AuditLogs
+Backups
}
Accounting : "Developers = Read/Write"
Accounting : "Auditors = No Access"
Accounting : "Managers = Read"
AuditLogs : "Developers = Read"
AuditLogs : "Auditors = Read/Write"
AuditLogs : "Managers = Read"
Backups : "Developers = Delete"
Backups : "Auditors = No Access"
Backups : "Managers = Full Control"
note for Accounting "Violation: Developers shouldn't have write access"
note for AuditLogs "Violation: Auditors need read-only"
note for Backups "Violation: Backup deletion risky"
Least Privilege Violation: Developers with production write access violates Separation of Duties (Domain 5)