Policy Server Guides › Policy Design Guide › Implementing Policy-based Security › How a Security Model Is Established › How Organization and Resource Requirements Are Established

How Organization and Resource Requirements Are Established

Before you can setup a security model, you must establish the organization and resource needs of your organization. Some general issues to consider include:

• Are there security guidelines, regulations, or laws your organization is required to meet?
• If security needs conflict with business requirements, which requirements take precedence?
• Has a lack of security affected the reputation of your organization?
• Have security incidents in the past caused financial loss or taken down the site?
• Once you have established the overall security requirements and concerns, you are ready to define the more specific security requirements outlined below.