A security descriptor structure that contains pointers to the security information associated with an object.