Steps to Access Control

1.Identity control

2.Accounts Provisioned

3.Subject Identifies

4.Subject Authenticates

5.Subject is Authorized

6.Auditing/Accountability is based on identification information

7.Account Deprovisioned