Mandatory Access Control (MAC) is a security strategy that restricts the ability of entities (such as users or systems) to access information based on predefined policies. Unlike other access control methods, MAC does not allow users to alter the access permissions of data.