The IDP device may select {HEAD ~ a policy} associated with {TAIL ~ the security class} identified by the mapping 
The IDP device may select { HEAD ~ a policy } associated with { TAIL ~ the security class } identified by the mapping
OTH OTH OTH OTH OTH HEAD HEAD HEAD HEAD HEAD HEAD REL REL TAIL TAIL TAIL TAIL TAIL TAIL TAIL OTH OTH OTH OTH