To control access by a subject (an active entity such as individual or process) to an object (a passive entity such as a file) involves setting up an Access Matrix. An Access Matrix is a straightforward approach to defining the rights of subjects (users or processes) regarding objects (files or resources), specifying what operations each subject can perform on each object. It efficiently organizes and manages access controls in a tabular form to ensure security and proper access rights.