Represents the action that a person or process may perform on an information resource. Historically, "security operations" have been thought of as being related to a single file, record, or object: Create, Read, Update, Delete, Execute, e.g., Susan may Read but not Update or Delete this file. "Privacy operations" on the other hand have been thought of more broadly, often operating on a set of related files, records or objects: Access, Disclosure, Collection, Use, e.g., Susan may Access but not Disclose Patient Doe’s medical records. This class combines the intent of both kinds of operations, and the two sets of vocabulary are merged, although one could argue that Read is the same thing as Access.