Difference between a security management model

  What is the fundamental difference between a security management model and a security architecture model? Explain with an illustrative example. (a) What are the key principles on which access control is founded? (b) What two access control methods that use a state machine model to enforce security? Compare and contrast the two methods by explaining their similarities and differences. What is separation of duties? Discuss the various ways through which this method can be used to improve an organization’s InfoSec practices.