policy in a software-intensive information system. These are the functional
areas of access control, identification, authentication and authorization, and
the functions that perform encryption, decryption, and key management These
functions prevent the violation of the security properties of the system or the