Designing for Fail-Closed Security

Ensure that access control mechanisms default to denial in the event of policy engine failure.