general criteria define the logical access policy of an organization