describes the way in which a subject may access an object. read write execute delete  create search
security option that determines the areas of the program a user can access, and whether the user has rights to enter or edit data. e.g. write, view, change, read, execute.
looked at organization as a whole