Cryptographic module security policy

Definition
A cryptographic module security policy is

"a precise specification of the security rules under which a cryptographic module must operate, including the security rules derived from the requirements of this standard and the additional security rules imposed by the manufacturer."