Security Reference Monitor (SRM)
Checks for proper authorization before granting access to objects.
Object manager is a customer of a SRM: it asks SRM if a process has the proper rights to execute a certain type of action on an object.
Implements auditing functions to keep track of attempts to access an object.