A security policy that specifies who or what may have access to each specific system resource and the type of access that is permitted in each instance is a$($n$)1)$audit control policy$\mathrm{.}2)$system control policy$\mathrm{.}3)$resource control policy$\mathrm{.}4)$ access control policy.