the system-specific security policy (SysSP

We have to write the system-specific security policy (SysSP) . we are the system security agency for the hospital. So we have to write security policy under system and information types.