In computer sciences, the separation of protection and security is an application of the separation of mechanism and policy principle.[1] The protection mechanism is supposed to be a component that implements the security policy. However, many frameworks consider both as security controls of varying types. For example, protection mechanisms would be considered technical controls, while a policy would be considered an administrative control.