Authorisation

The process of determining what actions an authenticated user or system is permitted to perform. Typically enforced through access control lists or role-based access control.

Authorisation is a key concept in Information Security. Understanding authorisation helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform covers this concept across 692 frameworks with 819,000+ control mappings.

Key concepts related to Authorisation include Authentication, RBAC (Role-Based Access Control), Least Privilege. Understanding these interconnected concepts provides a more comprehensive view of Information Security requirements and helps organizations build holistic compliance programs.

Explore our compliance framework pages to see how authorisation applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 692 frameworks.