defines the implementation of the files concerning who or what can gain access to a system or network
a set of rules established by an organization that specify how users can access resources on the system;
software that performs some useful task such as word processing or playing a game for a user. ( microsoft office, google suite, database)