Creating Security Policies

Overview

Security policies define the rules and requirements for your organisation's security posture. Bleach helps you create, deploy, and monitor policy compliance.

Step 1: Access Policy Manager

1. Navigate to Policies → Policy Manager
2. Click "Create New Policy"
3. Choose to start from scratch or use a template

Step 2: Define Policy Basics

1. Enter a descriptive policy name
2. Select the policy category (Access, Data, Compliance, etc.)
3. Write a clear policy description and objective
4. Set the policy owner and review frequency

Step 3: Configure Policy Rules

1. Add specific requirements or controls
2. Set compliance criteria (pass/fail conditions)
3. Define exceptions if applicable
4. Link to relevant compliance frameworks

Step 4: Set Scope and Enforcement

1. Select which users or groups the policy applies to
2. Choose enforcement mode (monitor only or enforce)
3. Configure violation notifications
4. Set remediation timeframes

Step 5: Review and Publish

1. Preview the policy configuration
2. Run a compliance simulation
3. Publish the policy (active) or save as draft
4. Monitor compliance from the dashboard

Policy Best Practices

• Start with templates and customise as needed
• Use clear, actionable language
• Set realistic compliance timeframes
• Review and update policies quarterly
• Communicate policies to affected users