Definition
Security Policy
A security policy is a set of rules defining what access rights subjects have on objects.
Operational Aspects
Rule Administration
Rule Administration
How and by whom rules can be added, modified, or deleted.
Delegation
Delegation
Can a subject with certain access rights propagate them to other subjects?
Revocation
Revocation
How can access rights be taken away from a subject?