Complicated Interaction of Security Components

System Security requires

Authorization policy implementation
Data confidentiality enforced

Authorization requires Authentication

Privacy is somewhat independent

When employed, it is often linked with Authentication
System may be completely secure but no privacy (e.g., 1984)