Zachman and Security Policy “A system security policy is often perceived as a set of mandatory requirements levied upon the system by an organizational directive or Information System Security