mandatory access control (MAC)

Mandatory Access Control (MAC) is a security strategy for controlling access tofiles and resources. This mandatory, rule-based access strategy is used to grant users access to objects, files, and IT systems, and deny access to others.

MAC access is specified by the system administrator and implemented by the operating system. The specified conditions cannot be changed by the user. The mandatory MAC strategy goes beyond authorization by passwords, personal identification numbers and electronic keys and includes rules and classification labels to gain access. Depending on the sensitivity of the data, access rights are graded into security levels. For example, "confidential," "secret," and "top secret." These or similar security levels apply equally to users and devices.