ITtilgang

ITtilgang, or information technology access, denotes the ability of a user or process to reach IT resources such as networks, systems, applications, and data. Access is governed to protect confidentiality, integrity, and availability of information.

Access is typically controlled through an identity and access management (IAM) framework, combining authentication (verifying identity) with authorization (granting permissions). Authentication methods include passwords, hardware tokens, biometrics, and multi-factor authentication (MFA).

Authorization is implemented via access control models: discretionary access control (DAC), mandatory access control (MAC), role-based access control (RBAC), and attribute-based access control (ABAC). Each model defines how permissions are assigned and enforced, from owner-determined rights to context-based rules.

Best practices include the principle of least privilege, need-to-know, and segmentation of duties. Organizations manage the ITtilgang lifecycle through onboarding, modification, and offboarding of users, and by issuing temporary elevated access when required. Strong password policies and regular credential reviews are common, along with privileged access management for high-risk accounts.

Monitoring and auditing are essential. Logs, access reviews, and anomaly detection help detect unauthorized attempts and ensure compliance with regulations such as GDPR or industry standards. As cloud services and remote work expand, approaches like zero trust and continuous authentication are increasingly adopted to reduce implicit trust in networks.