2.03

Evaluate whether rules are being implemented effectively and appropriately to mitigate violations

• • Evaluate the implications of changes in the policy to the security and vulnerabilities of the application