Access control

Technical and administrative mechanisms that limit who or what can access data, systems, and tools (e.g., authentication, authorization, role-based access control, least privilege). Access control is central to confidentiality, privacy, and security obligations.