CISSP: Certified Information Systems Security Professional

A reference monitor mediates access requests between subjects and objects and enforces the system’s access-control policy. The access control matrix defines or represents permissions, but it is not itself the enforcement mechanism.