This is the base class for a variety of individual policy types, and may be used to instantiate specific policies. These policies may exist on their own, or may be combined together in a composition of atomic policies. ISO 22600-2 specifies a Security Policy as plan or course of action adopted for providing computer security. This class is derived from ISO 22600-2 and HL7 DAM, where this concept is called Basic Policy. The FHIM calls this Atomic Policy to emphasize that they may be combined into composites.