The purpose of access controls is to prevent unauthorized access to assets. This helps organizations to protect their assets from unauthorized disclosure, modification, or destruction. Therefore, option a is the correct answer.