This CISSP domain includes all aspects of access control and identity management.

Services that are placed in this domain are related to the following subjects:

• Physical and logical assets control
• Identification and authentication of people and devices
• Identity as a service (e.g. cloud identity)
• Third-party identity services (e.g. on-premise)
• Access control attacks
• Identity and access provisioning lifecycle (e.g. provisioning review)