The Access Control Policy and supporting documents are critical components that focus on ensuring that access to sensitive information and systems is strictly controlled and monitored. These documents contain policy and procedures focused on limiting access to systems and information to authorized users, processes, or devices, and to authorized activities and transactions. This limitation is crucial for protecting the confidentiality, integrity, and availability of information.