# Security Policy

<figure><img src="https://1055198255-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuV5xU0WcBm5EwmO8bq5p%2Fuploads%2FZgWpcK1hYfZCYqJHKgCW%2F2023-10-14_11-43.png?alt=media&#x26;token=d73489e3-8164-4847-9ee7-6ea648578dc1" alt=""><figcaption></figcaption></figure>

## Security requirements and Policy summary

* **Security requirements** determine that capability for security mechanisms to behave in some manner.
* **Secure policy** determines the behavior that is deemed "secure" behavior.
* For a **mechanism** to be deemed **secure**, the requirements for the capability of the mechanism must be **consistent** with the **security policy enforcement rules**, the mechanism must satisfy the security requirements, and the mechanism must be configured to behave in a manner defined by the **organizational security policy**.

<figure><img src="https://1055198255-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuV5xU0WcBm5EwmO8bq5p%2Fuploads%2FXpyvS9VFBmh93ZsxjGdY%2F2023-10-14_11-49.png?alt=media&#x26;token=02c3637b-a039-4c5b-80d4-93dc20d85233" alt=""><figcaption></figcaption></figure>
