What are the three fundamental elements of an effective security program for information systems?

Authentication, Authorization and Identification.

Authentication - It is a process of how one proves or determines whether they are who they declare to be or who they say they are. Logically, authorization on the hand can be used synonymously with Authentication but are two different processes. Authorization occurs when one has been identified and authenticated. Identification is simply claiming that you are somebody. In the IS world, identification is analogous to entering a username and not analogous to entering a password.

the three fundamental elements of an effective security program for information systems are Identification, Authentication and Authorization. The access control creates the user and assigns the rights to resources and authorization is giving permissions to the users to access the resources. The user who wants to enter the system should have a valid data t enter the system like password, fingerprint or any other type of recognition.