Columns of an access matrix represent objects, and the list of permissions for a given object across all subjects is called an Access Control List (ACL). In contrast, rows represent subjects and correspond to capability lists. Triples represent (subject, object, rights) entries, and properties are unrelated attributes.