. . "A security policy is what it means to be secure for a system, organization or other entity." . . .