Hmm, might want to review security models again. The ones you described are least privilged/need to know and seperation of duties, not the BL. The BL is based on the simple, *, strong and tranquility security properties and trusted subjects.

I was just stating what was covered on the CISSP, and what is covered is very little specific technical knowledge even though many books will have pages on the math of a specific encrtpyion standard.

catch