For example, the assertion could declare that the message be encrypted; the actual definition of this assertion would be in the WS-Security Policy domainspecification.
In the latter case, you must import the domainspecification (namespace declaration and XSD import declaration with the schema location) so that the XSD parser can resolve the referred elements.