Business Security Tool

How BST does it

ABAC engine

The methods traditionally applied for access control do not fulfil the requirements imposed by the challenges of the extended company, nor can they efficiently secure access control to confidential information, in fulfilment of regulatory data access requirements.

For all these reasons, BST is based on Attribute-Based Access Control (ABAC). Attribute-based access control defines an authorisation control paradigm based on policies. ABAC serves to control fine-grained authorisation by combining the characteristics of users, resources and the environment, efficiently and dynamically managing all your organisation's privileges, in real time.

The policies provide a user-friendly way of establishing which characteristics a user must fulfil to be allowed to perform a particular action with regard to a defined resource perimeter.

Zero Trust: Two-level engine

BST has the capacity to establish two levels of control over the authorisation model of an application, making it possible for a team, typically CISO, Control, Regulator… to establish controls over critical profiling elements, while the business owner can then manage greater levels of segregation for them in real time, improving experience and Time to Market, without the CISO department losing overall control of the critical part of the model.

• Profiling level 1: typically controlled by the cybersecurity department. It allows them to limit the capacities that any user may have within a specific application.
• Profiling level 2: typically assigned by the business owner, these are the capacities defined for a user within the limits established by the perimeter assigned at level 1.