The system must protect the access to information so that only authorized users can access to a given set of data for reading or editing.