Set a project access control policy
Security officer, CISO and vetting officer: Set a project access control policy. Starts when: Project created. Steps: Open policy form; Define roles, resources and conditions; Test with a sample person; Publish. Done when: The policy shows the version and the test result with a receipt. Rules that apply: NCSC Cyber Assessment Framework.