They know how the program is intended to behave, what it's core functionality is. They have a model of how the software should work. A tool that allows them to

They know how the program is intended to behave, what it's core functionality is. They have a model of how the software should work. A tool that allows them to encode that model into a policy is ideal. The point is that they don't have to understand organizational policies, they just have to understand their program - does it use network, talk to the filesystem, etc. If you want to enforce broader policies SELinux is not going anywhere.