Brewer and Nash
This model focuses on preventing conflict of interest when a given subject has access to objects with sensitive information associated with two competing parties.
3 slides · 1 min read · Domain 3
The principle is that users should not access the confidential information of both a client organization and one or more of its competitors.
At the beginning, subjects may access either set of objects. Once a subject accesses an object associated with one competitor, they are instantly prevented from accessing any objects on the opposite side. This is intended to prevent the subject from sharing information inappropriately between the two competitors even unintentionally. Such ethical walls are also frequently used in financial services organizations, for example, to prevent corporate advisory services isolated from brokerage services; this reduces the opportunity and the temptation to abuse insider information in ways that would violate both laws and ethics. It is an unusual model in comparison with many of the others because the access control rules change based on subject behavior.