OSCAL Parameters within AC-1: Policy and Procedures
an official to manage the access control policy and procedures is defined;