Use levels of security to classify users and data -mandatory access control is a strict hierarchical model, first developed by governments and it is based on classifying data on importance and categorizing data by department. users receive specific security clearances to access this data. for instance, the most important piece of data would have the highest classification, where only the president would of that department would have access; while the least important resources would be classified at the bottom where everyone in the organization including the janitors could access it.