Allow CSP frameworks to factor into policy validation check

When creating a policy and scoping it to compliance frameworks, users need to be able to assign both frameworks from their group as well as the CSP group.

Edited by Jean van der Walt