internal security controls

Hardware, firmware, or software features within an information system that restrict access to resources to only authorized subjects.