Cisco Security Manager, how does the policy manager handle precedence?

The CSM can push out policies (for example VLAN 3 can talk to VLAN 12
only on port 22) throughout the enterprise.

This of course translates to pushing out an ACL with these rules.

Here's my question:

How does it know where in the list of ACL's to place it? Since
precedence is of importance, it would appear at first glance that
things could break if it places it just anywhere.

If you have insight on this, it would be most helpful.