A preliminary statement of the basic security-relevant facts about a system. Note: An initial System Security Policy constitutes the basis for the Departmental Security Officer's risk assessment and Security requirement.