information security define access policy Angus Whyte Celia van Gelder Mateusz Kuzak Understand the needs and conditions of information access for different stakeholder groups. Identify the responsibility and rights for each stakeholder group on informaiton access. Build up a catalogue of risk profiles. For each risk profile, develope mitigation protocols. Yan Wang