Access control policies are designed to ensure authorized user access and to prevent unauthorized access to systems and services.