Similar to:
IT 244 Appendix F Access Control Policy