Discuss below three components of Access Control and their importance to business.
* Policies: Defined from laws, requirements, and industry guides
* Subjects: People who need to access or are restricted from accessing
* Objects: Resources or information that need protection