PROTECTING INFORMATION: A COMPREHENSIVE ACCESS CONTROL FRAMEWORK