Assurance management framework for access control systems