rules that the information system enforces relative to the resources under its control to reflect the organizational security policy.
rules that the information system enforces relative to the resources under its control to reflect the organizational security policy.
policies with requirements that evidently make their creation