Processes set up to ensure a person gains access only to the resources they are entitled to use.

The text you provided seems to be a definition rather than a question. It defines the concept of "Access Control" in information security. Access control is a security technique that regulates who or what can view or use resources in a computing environment. It is a fundamental concept in security that minimizes risk to the business or organization.

Here are the steps involved in setting up access control:

1. Identification: The first step in access control procedures is identifying the user who is trying to gain access to a resource.

2. Authentication: After identification, the system must authenticate that the user is who they claim to be. This is usually done through passwords, biometric scans, or personal identification numbers (PINs).

3. Authorization: Once the user is authenticated, the system must determine if the user has the appropriate permissions to access the resource they are trying to use.

4. Access: If the user is authorized, they are granted access to the resource.

5. Audit: The system should keep a record of all access control activities for audit purposes. This helps in identifying any potential security breaches or misuse of resources.

6. Review: Regular reviews of access controls and user rights are necessary to ensure that the right people have access to the right resources.

Remember, the goal of access control is to prevent unauthorized access to physical or electronic resources while ensuring that authorized users have the access they need.