Episode 17 — CC6 Logical Access: IAM, SSO, MFA, JML

CC6 focuses on logical access—ensuring that only authorized individuals can interact with systems and data. It encompasses Identity and Access Management (IAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Joiner–Mover–Leaver (JML) processes. The exam expects understanding of how these components enforce least privilege and separation of duties. IAM defines identity lifecycle governance; SSO centralizes authentication; MFA adds assurance; and JML ensures that access changes follow employment or role transitions. Effective logical access management reduces insider risk and supports confidentiality and integrity across the environment.

Operationally, auditors test CC6 by sampling user accounts, privileged access reviews, and configuration baselines for MFA or SSO enforcement. Automated provisioning and deprovisioning reduce manual error, while periodic entitlement reviews confirm access remains appropriate. Failures often occur when temporary accounts persist beyond necessity or when third-party access isn’t regularly verified. Real-world maturity involves integrating IAM with HR systems and using just-in-time access for administrative tasks. For the exam, candidates should link CC6 to both the Security and Confidentiality categories, emphasizing risk reduction through disciplined identity management. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.