Access control in computer systems is a crucial aspect of information security, ensuring that only authorized individuals can access specific programs or files.

The correct answer to the given question is option (d) Both (a) and (b). This means that access can be limited to authorized individuals through a combination of appointing a librarian and controlling passwords.

Correct Answer Explanation: d. both a and b

Appointing a librarian refers to designating a responsible individual or a group of individuals who oversee and manage access to certain programs or files.

This is analogous to a traditional library setting, where a librarian is in charge of ensuring that only those with proper authorization can check out specific books or resources.

In the context of computer systems, the appointed individual or team would be responsible for setting and enforcing access policies, granting permissions, and ensuring that only authorized users have the necessary privileges to access certain resources.

Controlling passwords is another critical element of access control. A password is a secret alphanumeric code that authenticates a user’s identity and grants them access to a system, program, or file.

By managing passwords effectively, system administrators can ensure that only individuals with the correct credentials can gain entry. This involves implementing robust password policies, such as requiring a combination of letters, numbers, and special characters, as well as regular password updates.

It also involves educating users about the importance of strong, unique passwords and the dangers of sharing them.

Now, let’s address why the other options provided in the question are not correct:

a) Appointing a librarian alone,

Without the implementation of password controls, would not provide sufficient security for a computer system. While a librarian can help manage access to resources, they would not be able to prevent unauthorized access in the absence of password protection.

Appointing a librarian alone, without the implementation of password controls, may lead to potential security breaches and unauthorized access.

b) Controlling passwords alone,

Without any form of managerial oversight like appointing a librarian, may lead to a lack of centralized control and accountability.

While passwords are a critical component of access control, they need to be managed in conjunction with a designated authority figure or team responsible for overseeing access policies.

Controlling passwords alone, without any form of managerial oversight like appointing a librarian, can result in a lack of centralized control and accountability in the access management process.

c) Appointing an EDP (Electronic Data Processing)

Auditor is an important practice for ensuring compliance with security policies and regulations. However, an EDP auditor’s primary role is to assess and evaluate the effectiveness of existing security controls, rather than directly managing access to programs or files.

They play a vital role in providing recommendations and insights to improve security measures, but they are not directly responsible for day-to-day access control.

Access control in computer systems is a pivotal facet of information security. It ensures that only authorized individuals can access specific programs or files.

This is achieved through a dual strategy: first, by appointing a responsible individual or team (librarian) to oversee access and permissions; and second, by implementing robust password controls.

The librarian is tasked with setting and enforcing access policies, while passwords serve as confidential codes that authenticate users. This combined approach provides a comprehensive framework for managing access effectively.

Relying solely on one aspect, such as appointing a librarian without password controls, leaves the system vulnerable to potential breaches and unauthorized access.

Similarly, depending exclusively on password controls without a designated authority figure like a librarian can result in a lack of centralized control and accountability in managing access.

While an EDP auditor plays a vital role in evaluating security measures, their primary function is to assess and recommend improvements rather than directly managing day-to-day access.

In conclusion, a balanced integration of appointing a librarian and implementing robust password controls is indispensable for a robust access control system, enhancing overall security and safeguarding sensitive information.