Since security is a negative requirement (a corporation or system is secure if it has no, or in practice, a set of known, accepted vulnerabilities) a core challenge to the management of complex policy chains is the coordination of tasks and responsibilities of numerous stakeholders.