Question 3

This approach aligns with the principle of Complete mediation.

Complete mediation ensures that all access to resources is controlled and verified, allowing for consistent security checks every time a resource is accessed.

A) Psychological acceptability

Psychological acceptability focuses on ensuring that security mechanisms are designed in a way that is easy for users to understand and use. While important, it does not directly relate to the concept of ensuring that all access is mediated by security checks, which is the essence of complete mediation.

B) Complete mediation

Complete mediation is the correct principle as it emphasizes the necessity for all access attempts to be checked against security policies before granting access to resources. This approach prevents unauthorized access by ensuring that every access request is verified, aligning perfectly with the definition of complete mediation.

C) Open design

Open design refers to the principle that security mechanisms should not be secret, allowing for public scrutiny and collaboration to identify vulnerabilities. While open design contributes to overall security, it does not specifically address the requirement for thorough verification of access, which is characteristic of complete mediation.

D) Separation of duties

Separation of duties is a security principle aimed at preventing fraud and error by dividing responsibilities among different individuals. Although it is a crucial aspect of security, it does not relate to the systematic verification of access that complete mediation mandates.

Conclusion

The principle that aligns with the approach described is complete mediation, as it requires that every access to a resource be controlled and verified against security policies. Other options, while relevant to security in various contexts, do not encapsulate the necessity for all access to be mediated by security checks in the same way. Thus, option B is clearly the most appropriate choice.