[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-202492-105":59,"doc-detail-202492-en":123},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":116,"head_meta":118,"extra_data":120,"updated_unix":122},105,"en","the-10-security-domains-retired-access-control","The 10 Security Domains - Retired - Access Control","","Practice brief explains the 10 security knowledge domains associated with the CISSP credential and how they support information security principles across industries, including healthcare privacy needs for electronic health records. It clarifies that the 10 security domains represent general best practices rather than the HIPAA Security Rule, which is designed for scalable, technology-neutral compliance. The document introduces Access Control and details identification, authentication, authorization, and accounting, including audit considerations to maintain accountability and reduce misuse risk.",{"@graph":69,"@context":115},[70,84,106],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":40,"@type":76,"position":81},"https://docshare.wps.com/document/research-report/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/the-10-security-domains-retired-access-control/202492/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/the-10-security-domains-retired-access-control/202492.png","ImageObject",300,407,{"name":92,"@type":93},"McQueen","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-11-02","2026-09-04",true,{"@type":102,"interactionType":103,"userInteractionCount":105},"InteractionCounter",{"@type":104},"ViewAction",12,{"@type":107,"mainEntity":108},"FAQPage",[109],{"name":110,"@type":111,"acceptedAnswer":112},"What are the main steps in the Access Control Process?","Question",{"text":113,"@type":114},"The Access Control Process includes identification, authentication, authorization, and accounting, with audit controls to support accountability and monitoring of actions within systems.","Answer","https://schema.org",{"og:url":83,"og:type":117,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":119,"canonical":83},"index,follow",{"doc_id":121,"site_id":62},202492,1788547442,{"code":4,"msg":5,"data":124},{"doc_id":121,"user_id":125,"nickname":92,"user_avatar":126,"doc_module":4,"category_id":39,"category_name":40,"doc_title":65,"doc_description":67,"doc_content":127,"file_id":128,"file_url":129,"file_type":130,"file_size":131,"view_count":105,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":52,"language":132,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":133,"faqs":134,"seo_title":135,"seo_description":67,"update_tm":122,"read_time":136,"preview_page_count":4},5909890329169,"https://ap-avatar.wpscdn.com/davatar_9964176cb1d06d4a9deccf72a44ae3dc","The 10 Security Domains (Updated 2013) -Retired  \nSave to myBoK  \nEditor 's note: This update supersedes the February 2004, February 2010, and May 2012 practice briefs \"The 10 Security Domains. \"  \nIn today's healthcare environment, HIM professionals must understand basic information security principles to fully protect the privacy of information. The connection between privacy and security is critical for securing electronic health records.  \nThis practice brief outlines the 10 security knowledge domains that individuals with a Certified Information Systems Security Professional (CISSP) credential must possess. The CISSP is offered through the International Information Systems Security Certification Consortium. The knowledge domains for the CISSP credential provide a foundation of security principles and practices in all industries, not just healthcare . It's important to note that the 10 security domains are different from what the HIPAA Security Rule requires. The HIPAA Security Rule was designed to be comprehensive, scalable and technology neutral so that healthcare organizations could meet compliance according to their size, type and need. The 10 security domains are more \"best practices\" in nature, are not healthcare specific, and explained throughout this practice brief.  \nThe Security Domains  \nTo provide a Common Body of Knowledge (CBK) and define terms for information security professionals, the International Information Systems Security Certification Consortium (ISC2) created the following 10 security domains for the CISSP credential1 :  \n Access Control  \n Telecommunications and Network Security  \n Information Security Governance and Risk Management  \n Software Development Security  \n Cryptography  \n Security Architecture and Design  \n Operations Security  \n Business Continuity and Disaster Recovery Planning  \n Legal, Regulations, Investigations and Compliance  \n Physical (Environmental) Security  \nAccess Control  \nIt's important to control access to information so that organizations can maintain the confidentiality, integrity, and availability of that information. Access controls prevent unauthorized users from retrieving, using, or altering information. These controls are determined by an organization's risks, threats, and vulnerabilities.  \nThe \"Access Control Process\" below illustrates the primary steps in the controlling a user's access to information.  \nAccess Control Process2  \n[https://bokold.ahima.org/doc?oid=300203](https://bokold.ahima.org/doc?oid=300203) 1/10  \n12/4/24 , 3 :51 PM The 10 Security Domains ( Updated 2013) - Retired  \n\n| |  |\n| --- | --- |\n|  |  |\n\nIdentification (i. e . , the assignment of a unique user ID) is step one in the Access Control Process. Most organizations derive a user's ID from his or her name . For example, a user ID could be the first letter of a person's first name combined with their last name . However, some organizations may use other methods (e.g. , the user's employee number) to avoid conflicts that emerge when two individuals have the same last name and the same first letter of their first name . For example, Tina Smith and Tom Smith would both have the same user name ('tsmith') unless another method is used. Using an employee number, for instance, enables users to keep the same user ID even if their last name changes.  \nUnique user IDs are necessary for maintaining accountability. When an organization uses generic user IDs (e.g. floor2nurse), there is no easy way to identify who may have accessed the data .  \nAuthentication (i. e . , the process of proving a user's identity before he or she is able to enter a system) is step two in the Access Control Process. There are three primary methods to authenticate users. These methods are based on:  \n1. Something a user knows (e.g., PIN, password, phrase, or pass code)  \n2. Something a user has (e.g., smart card, ATM card, or token)  \n3. Something a user is (e.g., retina scan, fingerprint, or voice scan)  \nAuthorization (i.","cbCaimgWoR8KvMw5","https://ap.wps.com/l/cbCaimgWoR8KvMw5","pdf",345640,"English","# The 10 Security Domains (Updated 2013) - Retired\n## Editor's note and purpose\n## Security domains overview and CISSP foundation\n## Access Control\n## Access Control Process: identification, authentication, authorization, accounting","[{\"question\":\"What are the main steps in the Access Control Process?\",\"answer\":\"The Access Control Process includes identification, authentication, authorization, and accounting, with audit controls to support accountability and monitoring of actions within systems.\"}]","The 10 Security Domains - Retired - Access Control | PDF",25]