ISC2 · ISC2 CC
Least privilege and access models
ISC2 CC · Lesson 9 of 16 · 1:00:33
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 Certified in Cybersecurity (CC) exam, on the 2026 outline. In this lesson: least privilege, separation of duties, and the access control models: discretionary, mandatory, role-based, and attribute-based. Includes three original practice questions, with Maplewood Schools, a fictional school district, as the example.
Preview the topics
- One office worker can create a new supplier in the finance system, and approve payments to that supplier. Which principle is missing?
- Access to medical notes only when the user is a nurse, works at the student’s school, and signs in from a district-managed device. Which model is this?
- A teacher shares a lesson file with two colleagues, and decides herself who can open it. Which access control model is this?