Hi Naman,
security level are chosen by users and based on this choice different policy are enforced.
On other words: CSAMC administrator configures different policy for different security level chosen by user and when user modify its security level on security agent, different policy are activated on user's host.
Security level permits to have conditional policy: these policies are activated when one condition is matched such as: System status, security level etc...
Hope this help
Marco