...
In the access control context, PDP cannot effectively function without PEP (Policy Enforcement Point) in a framework since their roles are complementary. PDP receives an access request from PEP; performs an evaluation against the predefined policies; makes a decision (usually permix X deny); sends the decision back to PEP which then enforces the decision.
...