The set of controls that prevents users from accessing or changing any objects on the system, including user data, except by using the system-provided interfaces that enforce authority rules.