A person, organization entity, or automated process that accesses a system, whether authorized to do so or not.