Requirements for Encryption Policy