An analysis of cybersecurity is performed. A security policy, a specific statement of what is and is not allowed, defines the system's security. Security has three components: requirements, policy, and mechanisms. Security mechanisms enforce the policies; their goal is to ensure that the system never enters a disallowed state. A site's security strength is measured by how closely the requirements describe the site's needs.