1. A system, comprising: a network ( 110 , 135 ); a resource ( 145 ) connected to the network ( 110 , 135 ); a computer ( 105 ) connected to the network ( 110 , 135 ), including an integrity log generator ( 150 ) to generate an integrity log including a first plurality of signatures for a first plurality of modules; an apparatus ( 140 , 160 ) connected to the network ( 110 , 135 ), including: a database ( 205 ) arranged to store a second plurality of signatures for a second plurality of modules; a receiver ( 210 ) to receive from the computer ( 105 ) the integrity log; and a trust score generator ( 225 ) to generate a trust score based on a comparison of the integrity log with the second plurality of signatures; and a policy ( 230 ) to control access to the resource ( 145 ), the policy ( 230 ) including a threshold score ( 235 , 240 ) to receive full access to the resource ( 145 ); wherein access to the resource ( 145 ) by the computer ( 105 ) is controlled by the policy ( 230 ).