That which is perceived to be correct with respect to some criteria, e.g., as established by a security policy.