A defensible solution can be clearly supported with documented policies, processes, and procedures