Implementing Authentication and Secure Data Authentication Act of verifying someone's identity. Who are you? Authorization Act of verifying if someone has access to a certain operation/subsystem. What can you do?