Local: People interact with systems at the local level; these systems must be protected, whether or not they are attached to a network