thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Advanced

Clark-Wilson Model

Commercial integrity model using well-formed transactions and separation of duties to protect data.

Definition

Clark-Wilson defines constrained data items (CDIs) that can be changed only by transformation procedures (TPs), verified by integrity verification procedures (IVPs). Users access data only through programs, forming an access triple of user, TP, and CDI. It enforces separation of duties and auditing.

Example

Bank tellers modify balances only through an approved transaction application, never by editing the database directly.

Exam tip

Clark-Wilson = access triple and well-formed transactions; addresses all three integrity goals.

Related terms