Statistics for A Uniform Formal Approach to Business and Access Control Models, Policies and their Combinations