How do we control "security"?

If I want a blog that is open only to a particular set of people (say, nurses...who want privacy within their group), how do I control that aspect?