B2 Security

B2 security primarily complements B1 security by extending discretionary and mandatory access control features to all objects within the data processing or computing solution. B2 security requires that the underlying system have a formal security policy in place that addresses all object access and handling procedures. B2 security is also called structured protection, where all elements are categorized and structured as critical and non-critical elements along with implementation of stricter security controls and authentication mechanisms throughout each access point.