Problem
Any specification that requires implementation will also require a policy and potentially a procedure. Identify one specification from the administrative, one from the technical and one from the physical safeguards (three total), that would require a policy and/or procedure. Explain why a policy and/or procedure would be needed.