Maintaining a careful track of user rights and permissions, so that only authorized individuals can access specific systems.