The degree to which a component or system allows only authorized access and modification to a component, a system or data.