The discipline of authoritatively identifying users and machines and governing their access to systems and data.