User Access Restrictions
20 min
User Access Restrictions
User access restrictions control who can access a system and what they can do once inside. They work best in layers — starting with keeping attackers physically away, then verifying identity, then limiting what an authenticated user can actually do. Together, the following five measures form those layers of protection.
Physical Security Measures
The first line of defence — if someone cannot physically reach a device or server, they cannot access it at all. Examples include locked server rooms, cable locks on laptops, key-card entry systems, and keypad/code entry systems. A business might keep its main servers behind a locked door that only IT staff can open.
Advantages
- Simple and immediately effective — no technical knowledge required to implement a lock
- Protects against both external intruders and unauthorised internal access
- Works even during a system outage or cyber attack
Disadvantages
- Keys and access cards can be lost, stolen, or copied
- Does nothing to stop remote/online attacks — a hacker halfway around the world is unaffected
- Physical infrastructure (doors, cabinets, key systems) can be costly to install and maintain
Unlock All Revision Notes
Syllabus-perfect, clutter-free summaries — so you only study what really matters.
Start your 7-day free trial (no card needed!)Existing User? Sign In
Fancy a quick challenge?
You can skip — no worries!