The degree to which a component or system ensures that data are accessible only to those authorized to have access.