Provides the basis for protecting access to system resources

Must be protected from unwarranted change and accidental or deliberate removal

Must be backed up to protect against loss