A security policy that allows the classification of data and users based on a system of hierarchical security levels combined with a system of non-hierarchical security categories. The system imposes mandatory access controls restricting which users can access data based on a comparison of the classification of the users and the data.