This Recommendation International Standard defines a general framework for the provision of access control. The primary goal of access control is to counter the threat of unauthorized operations involving a computer or communications system, these threats are frequently subdivided into classes known as unauthorized use, disclosure, modification, destruction and denial of service.