Restricting information access to authorized personnel is called what?

Prepare for the VTCT Level 2 Facial and Skincare Test. Revise with flashcards and multiple choice questions, accompanied by insightful explanations. Ace your assessment with confidence!

Controlling who may access information and what they can do is the central idea here. Access control puts in place rules and mechanisms—like roles and permissions—that limit access to data and resources to people who are authorized. It’s the mechanism that enforces restrictions based on identity and rights, often built on top of authentication (verifying who someone is) and authorization (checking what they’re allowed to do).

That’s why it’s the best fit for this scenario: restricting access to authorized personnel. Data governance covers overall data policies and accountability, not the specific restriction mechanism. Encryption hides data by making it unreadable without a key, but it doesn’t actively restrict access to the data within a system. User authentication verifies identity, but it’s a component of access control rather than the full system that enforces who can access what.