initial system security policy

A preliminary statement of the basic security-relevant facts about a system [CESG]. Note: An initial System Security Policy constitutes the basis for the Departmental Security Officer's risk assessment and Security requirement.