Which security concept involves granting permissions based on job roles to limit access to OT systems?

Which security concept involves granting permissions based on job roles to limit access to OT systems?

• A. Role-based access control
• B. Discretionary access control
• C. Mandatory access control
• D. Open access policy

Answer: (A)

Granting permissions based on a user’s job role is role-based access control. In this approach, permissions are assigned to roles rather than to individuals, and people gain those permissions by being placed into the appropriate role. This supports least privilege and makes it easier to manage access in complex OT environments, because you can adjust what a whole role can do without touching every user’s rights. For OT systems, you can map roles to concrete duties (operator, engineer, administrator) and ensure each role can perform only the tasks its job requires. Discretionary access control would let the owner decide who gets what on a case-by-case basis, which can lead to inconsistent permissions. Mandatory access control uses fixed security labels and clearances rather than roles. Open access policy implies broad, unrestricted access, which is not suitable for securing OT systems.

Granting permissions based on a user’s job role is role-based access control. In this approach, permissions are assigned to roles rather than to individuals, and people gain those permissions by being placed into the appropriate role. This supports least privilege and makes it easier to manage access in complex OT environments, because you can adjust what a whole role can do without touching every user’s rights. For OT systems, you can map roles to concrete duties (operator, engineer, administrator) and ensure each role can perform only the tasks its job requires.

Discretionary access control would let the owner decide who gets what on a case-by-case basis, which can lead to inconsistent permissions. Mandatory access control uses fixed security labels and clearances rather than roles. Open access policy implies broad, unrestricted access, which is not suitable for securing OT systems.