#Create a Policy

In Policy enforcement, rules and policies work together to enforce compliance, where the rule defines the “what” and the policy defines the “how” and “where”.

• A rule is the fundamental building block – a pre-defined condition that controls, restricts, or detects a specific configuration. It defines the standard that must be met. For the list of supported rules in the system, refer to Supported Rules.

• A policy is the enforcement mechanism for a rule. You need to add a single rule to a policy to activate it. The policy then enables the customization of the rule by defining the scope of data it monitors and the actions to take when a violation is detected.

For detailed instruction on creating policies, refer to the following sections.