added control policy framework documentation