Edit

Item

Description Statements, rules or assertions that specify the correct or expected behavior of an entity. For example, an authorization policy might specify the correct access control rules for a software component.

Source https://csrc.nist.gov/glossary/term/Policy

Context