A means by which a System Security Policy is enforced. Note: A general term, covering technical, procedural and management aspects of security.