I’m a big proponent of creating a security policy hierarchy. It’s a great way to logically organize your policies and it helps you make sure you have all of your policy bases covered.
An excellent example of such a policy hierarchy can be found at the Lazarus Alliance site here.
