This is pretty basic stuff for those in the security industry. Read about mandatory access control if you are more familiar with discretionary access control (w

This is pretty basic stuff for those in the security industry. Read about mandatory access control if you are more familiar with discretionary access control (what happens in most off-the-shelf operating systems) as an interesting example of how things are done differently. Access control is one thing but: 1) How can we guarantee that the control cannot be bypassed when everything is secret? 2) How can we guarantee that someone with clearance is not selling information to criminals?