How is policy administration point $($PAP$)$ defined?

Serves as the retrieval source of attributes required for policy evaluation

Provides a user interface for creating, managing, testing, and debugging DPs and MPs

Computes access decisions by evaluating applicable DPs and MPs

Enforced policy decisions in response to a request from a subject requesting access to a protected object