Security policies used to control access to a network and actions on a network. This can include authentication checks and authorisation controls.