Security Policy First develop the Information Access Control Security Policy Objective of policy –The confidentiality and integrity of information assets stored within systems must be protected –Only authorized users must have access to specific defined, documented and approved systems and applications Clearly articulate RBAC requirements
{}