An enclave is a defined portion of an OSA’s environment with specific security controls. While some security implementations can be inherited from the enterprise level, the OSA must ensure that all requirements are met within the enclave. If an enterprise-level implementation is invalidated within the enclave, alternative methods must be demonstrated.