This includes understanding various security controls, such as access controls, authentication, and authorization.