ISM guideline: network access controls
Name:
Date:
Class:
A
Quick Questions
Shade in the A or B circle for each question.
1. Should access only be given to what someone actually needs?
2. Should the network check who is trying to connect before letting them in?
3. Should access be allowed by default unless it's denied?
4. Should access be reviewed regularly?
5. Should access be removed once someone no longer needs it?
B
Match the Pairs
Draw a line connecting each item on the left to its match on the right.
| Left column | Right column | |
|---|---|---|
| 1Check who is trying to connect | ACatches outdated or unnecessary access over time | |
| 2Give access based on need | BNothing is allowed unless it's specifically approved | |
| 3Access should be denied by default | CThis leaves unnecessary risk - unused access should be removed | |
| 4Access should be reviewed regularly | DThis breaks the guideline - access should be based on need | |
| 5Allowing everyone full access to everything | EConfirms someone's identity before granting access | |
| 6Never removing access once granted | FLimits what someone can reach on the network |
C
Definitions
ISM access controls guideline
D
Fill in the Blanks
Complete each line of code by filling in the missing parts.
1.
Only give access to what is ______.
2.
Always _____ who is trying to connect.
3.
Access should be denied by _______
unless approved.
4.
Access should be reviewed _________.
5.
Access should be _______
when no longer needed.
E
Spot the Error
Shade in the letter of the line that contains an error.
Question 1
A
Give access to everything
B
Give access to what is needed
C
Check who is connecting
Question 2
A
Check who is connecting
B
Never check who is connecting
C
Give access based on need
Question 3
A
Approve access individually
B
Deny access by default
C
Allow access by default
Question 4
A
Review access regularly
B
Never review access again
C
Check who is connecting
Question 5
A
Remove access when not needed
B
Keep unused access forever
C
Give access based on need
Answer Key
ISM guideline: network access controls
Section A: Quick Questions
Q1
A — Yes
Q2
A — Yes
Q3
B — No
Q4
A — Yes
Q5
B — Yes
Section B: Match the Pairs
Q1
Check who is trying to connect → Confirms someone's identity before granting access
Q2
Give access based on need → Limits what someone can reach on the network
Q3
Access should be denied by default → Nothing is allowed unless it's specifically approved
Q4
Access should be reviewed regularly → Catches outdated or unnecessary access over time
Q5
Allowing everyone full access to everything → This breaks the guideline - access should be based on need
Q6
Never removing access once granted → This leaves unnecessary risk - unused access should be removed
Section C: Definitions
Q1
ISM access controls guideline — A rule that tells organisations to only give people access to the parts of the network they actually need, after checking who they are.Section D: Fill in the Blanks
Q1
Only give access to what is needed.Q2
Always check who is trying to connect.Q3
Access should be denied by default
unless approved.Q4
Access should be reviewed regularly.Q5
Access should be removed
when no longer needed.Section E: Spot the Error
Q1
A — Line 1 says to give access to everything, but access should only be given to what someone actually needs.
Q2
B — Line 2 says to never check who is connecting, but the guideline requires checking who is trying to connect.
Q3
C — Line 3 says to allow access by default, but access should be denied by default unless it's approved.
Q4
B — Line 2 says to never review access again, but access should be reviewed regularly.
Q5
B — Line 2 says to keep unused access forever, but access should be removed when it's no longer needed.