Access control is the pillar of building an information system. There are four main models of access control. Each of these has their place when designing an information system. Choosing the wrong one can severely weaken an information system, and choosing one that is too stringent for the organization can be an unnecessary hinderance.