Security Policies, Control Spheres, and Protection Mechanisms
The product has a SECURITY POLICY (intended or implemented) that defines one or
more CONTROL SPHERES that specify restrictions on which actors are allowed to access
which resources or behaviors. A PROTECTION MECHANISM is a set of behaviors that is