Hardware, firmware, or software features within an information system that restrict access to resources to only authorized subjects.
Source(s):
CNSSI 4009-2015