statements (e.g., “Mobile Code and Executable Content,” “Protected
Hardware, Software and Firmware”). The document correlates requirements
to system protection levels (PL) and then categorizes policy statements
according to their applicability at each PL.