A policy is being established across the company to define different security levels. Which access control system would utilize documented security levels such as Confidential or Secret to protect information from unauthorized access?

Mandatory Access Control (MAC) relies on documented security levels that pertain to the accessed information. Role-Based Access Control (RBAC) is based on the user's assigned role. Discretionary Access Control (DAC) permits the data owner to establish access control. BAC is not an access control model.