Policy Terminology

[Robert Shirey <[e-mail]>]

At a minimum, Internet security policy and other security-related documents
shoul use the internationally standardized terminology of ISO International
Standard 7498/2, the OSI security architecture.  For example, say
"data confidentiality" instead of "data privacy".  There is enough work to
do without having to define terms.

The draft policy reads much more like a voluntary code of ethics than a policy.

Definition from 7498/2:  "security policy:  The set of criteria for
the provision of security services".