Resident software controlling hardware and other software functions in an information system (IS) to provide a level of protection or security appropriate to the classification, sensitivity, and/or criticality of the data and resources it manages.