The underlying theory is based on the principle of authentication (verifying identity) and authorization (granting specific permissions) to protect assets from unauthorized access, ensuring confidentiality, integrity, and availability of resources. Authentication: The process of verifying the identity of the subject (e.g., "Are you who you say you are?"). https://guardworkforce.com.sg/access-control-system/