A formal access control methodology used to assign a level of confidentiality to an information asset and thus restrict the number of people who can access it.