Code access security consists of the following elements:

· Permissions - represent access to a protected resource or the ability to perform a protected operation.

· Permission sets - A permission set is a collection of permissions.

· Code groups - logical grouping of code that has a specified condition for membership

· Evidence

· Policy - Security policy is the configurable set of rules that the CLR follows when determining the permissions to grant to code. There are four policy levels - Enterprise, Machine, User and Application Domain, each operating independently from each other.