Write short note on "Identity and Access Control".

Identity and Access Control ensures the right person accesses the right resource — core of office security.

Two parts:

1. Identification + Authentication (Who are you?): Username + proof — password, smart card, fingerprint, OTP, or multi-factor (password + OTP). Example: biometric attendance + password for server room.
2. Authorization + Accountability (What can you do?): After login, roles decide rights via Access Control Lists — clerk enters, officer approves, admin deletes. All actions are logged for audit.

Without it, anyone could open salary files or delete records. With it, data stays confidential and misuse is traceable.