The set of pre-determined rules defining the nature of the relationships between assets and their associated threats.