Defines the access control policies to be implemented by the reference monitor.
No STIG checks reference this CCI.