OTBI vs BIP Security

Summary

How does security work for each of these report types?

Content

Hi all - does report security for these report types work the same?  For example, I have an employee that is pulling a report where she can see herself (BIP) and a report where she cannot see herself (OTBI).  Is there a way for me to ensure that she always does (or doesn't) see herself?  I am not sure how much more information I need to provide to receive an answer, so let me know

Thank you!