Assignment: Evaluating Access Control Methods 

Imagine you are an Information Systems Security Officer for a large federal government contractor. The CIO has recently developed concerns with the organization's current method of access control. In order to evaluate the different methods of access control, the CIO requested that you research mandatory access control (MAC), discretionary access control (DAC), and role-based access control (RBAC), and prepare a report addressing positive and negative aspects of each access control method. Further, the CIO would like your help in determining the best access control method for the organization.

Write a three to five (3-5) page paper in which you:

1. Explain in your own words the elements of the following methods of access control:
   1. Mandatory access control (MAC)
   2. Discretionary access control (DAC)
   3. Role-based access control (RBAC)
2. Compare and contrast the positive and negative aspects of employing a MAC, DAC, and RBAC.
3. Evaluate the use of MAC, DAC, and RBAC methods in the organization and recommend the best method for the organization. Explain your answer.
4. Speculate the foreseen challenge(s) when the organization applies the method you chose.   Suggest your strategy to address the challenge(s).
5. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.