Explains authentication types (multi-factor, biometrics), authorization models (RBAC, OAuth), auditing, and accountability. Covers AAA framework and shared responsibility in cloud service models.