certain principles, such as "users should not have access to any resource that is not explicitly
granted or implied." Defining these principles could become the basis of a Universal Policy.
BOUNDARIES/INTERFACES: the boundaries between multiple actors, components, etc. Many
(but probably not all) issues occur at boundaries or interfaces between two different entities.