IT Security Policies - ADE and AR State Policies