2.01

Evaluate the implications of changes in the policy to the security and functionality of the application

• • Evaluate whether the rules are being implemented effectively and appropriately to meet security and/or compliance requirements and make changes as appropriate