The ability of an information system to continue operating even though damaged or quickly recover from downtime within acceptable timeframes

The process of granting or denying specific requests to access data or enter facilities