Access control is a fundamental security practice that restricts access to resources to only authorized individuals. By authenticating a user's identity and authorizing their level of permission, it ensures that sensitive data and physical locations are protected from unauthorized use.