Access control is the process of restricting access to systems, resources, or data based on defined permissions and identities. It ensures that only authorised users or processes can perform specific actions, and is enforced through mechanisms such as authentication, authorisation, and auditing.