# data[].attributes.body
Access control is a security technique that regulates who or what can view or use resources in a computing environment. It is a fundamental concept in security that minimizes risk to the business or organisation.

# data[].attributes.body
Syslog is a standard for logging program messages that can be accessed by devices that would not otherwise have a method for connection.

# data[].attributes.body
Auditing gives access to the user that was authenticated. To complete the picture, you need to have a record of the users who have logged in and what the user accessed or even tried to access.

# data[].attributes.body
Virtual Network extends a private network across a public network and enables users to send and receive data across shared or public networks as if their computing devices were directly connected to the private network.

# data[].attributes.body
BitLocker is a computer hard drive encryption and security program released by Microsoft Corporation as a native application in its Windows 7 Enterprise and Ultimate editions, Windows Vista Enterprise and Ultimate, and Windows Server 2008, R2 and 2012 operating system versions. It is a drive security and encryption program that protects drive content and data from any offline attack.

# data[].attributes.body
An Encrypting File System (EFS) is a functionality of the New Technology File System (NTFS) found on various versions of Microsoft Windows. EFS facilitates the transparent encryption and decryption of files by making use of complex, standard cryptographic algorithms.

# data[].attributes.body
S/MIME (Secure/Multipurpose Internet Mail Extensions) is a standard for public key encryption and signing of MIME data.

# data[].attributes.body
A digital signature is a mathematical scheme that is sued to demonstrate the authenticity of a digital message or document.

# data[].attributes.body
A Certificate Revocation List (CRL) is a list of digital certificates that have been revoked by the issuing Certificate Authority (CA) before their scheduled expiration date and should no longer be trusted.

# data[].attributes.body
Public Key Infrastructure is a system which consists of hardware, software, policies and procedures that create, manage, distribute, use, store and revoke digital certificates.

# data[].attributes.body
Decryption is the process of converting data from encrypted when the file is stored on a disk.

# data[].attributes.body
SSL (Secure Sockets Layer) is the standard security technology which is used for establishing an encrypted link between a web server and a browser.

# data[].attributes.body
Most users are not going to log on onto a server directly to access their data files. Instead, a drive or folder will be shared (known as shared folder) and they will access the data over the network.

# data[].attributes.body
NTFS is the preferred file system to be used in today's operating systems, Their permissions allow you to control which users and groups can gain access to files and folders on an NTFS volume.

# data[].attributes.body
Rights authorises a user to perform certain actions on a computer such as logging on to a system or backing up files and directories on a system.

# data[].attributes.body
A group is a collection or list of user accounts or even computer accounts. However, they can be different from a computer as the group does not store the user or computer, it just lists them.

# data[].attributes.body
Objects are a distinct, named set of attributes or even characteristics that represent network resource. (E.G. Users and Computers).

# data[].attributes.body
These units are used to help organise objects within a domain and minimize the number of domains, you can use organisational units commonly as they are seen as OU.

# data[].attributes.body
With Kerberos, security and authentication is based on secret key technology where every host on the network has its own key

# data[].attributes.body
NTLM is the default authentication protocol for Windows NT, stand alone computers that are not part of a domain or when you are authenticating to a server using an IP address.

# data[].attributes.body
A domain controller is a Windows server that stores a replica of the account and security information of the domain and defines the domain boundaries.

# data[].attributes.body
Its a directory service which stores, organises and provides access to information in a directory.

# data[].attributes.body
RUNAS is a set of commands that allow admins to have full access to a network.

# data[].attributes.body
The Terminal Access Controller Access Control System Plus is a protocol that provides centralised authentication, authorization and accounting management.

# data[].attributes.body
This stands for Remote Authentication Dial in User Service (RADIUS) is a protocol that provides centralised authentication and accounting management for computers to connect and use a network service.

# data[].attributes.body
This is an authentication method that identifies and recognises people based on physical trait such as fingerprint, retina scan, iris recognition, face recognition and voice recognition.

# data[].attributes.body
This is a hardware token ( also known as a hard token, authentication token, USB token, cryptographic token) is a physical device that an unauthorised of computer services is given to ease authentication.

# data[].attributes.body
This is a pocket sized card with embedded integrated circuits consisting of non volatile memory storage components, and perhaps dedicated security logic.

# data[].attributes.body
This is a mathematical scheme that is used to demonstrate the authenticity of a digital message or document.

# data[].attributes.body
This is a electronic document that contains an identity such as a user or organisation and a corresponding public key.

# data[].attributes.body
This is when two or more authentication methods are used to authenticate someone, you are implementing a multifactor authentication system.

# data[].attributes.body
A personal identification number is a secret numeric password shared between a user and a system that can be used to authenticate the user to the system.

# data[].attributes.body
A login is the process that you are recognised by a computer system or network so that you can begin a session.

# data[].attributes.body
Non-repudiation prevents one party for denying actions they carry out.

# data[].attributes.body
Encryption is the process of converting data into a format that cannot be read by another user.

# data[].attributes.body
These policies give access to a user that was authenticated. To complete this security picture, you need to able auditing so that you can have a record of the users who have logged in and what the user accessed or tried to access.

# data[].attributes.body
A permission defines the type of access granted to an object (an object can be identified with a security identifier) or object attribute.

# data[].attributes.body
Authentication is the process of identifying an individual, usually based on a username and password.