Policy

Every system can be described by its requirements.
This set of requirements is the “policy” of the system.
This information is used as a basis for whether or not the system is performing as intended.
- E.g. Files must be accessible by only the owner
- Must support simultaneous usage.
- Must not allow passwords to be compromised remotely.