The Air Force should adopt USAA’s best practice and implement automated RBAC. RBAC limits access to network resources and system applications to only authorized users within predefined roles. It would simplify identity and access control compliance by managing access based on a user's role within the unit, not on an individual, user-by-user basis. Automating RBAC that leverages MILPDS position numbers will allow a significant amount of time to be returned to the workforce, increase our security posture and decrease unnecessary workload levied on our cyber security professionals.
Roles should be created based on functional positions and system access requirements not on individual user needs. Every Airman requires access to NIPRNET, a role
Roles should be created based on functional positions and system access requirements not on individual user needs. Every Airman requires access to NIPRNET, a role