This policy establishes the system and communications protection requirements for managing risks and establishes a system and communications protection program. The system and communications protection program helps DAS implement security controls with regard to system configuration and data communication and transfer.