This documentation discusses how one can correctly creat a network security policy. This document is divided into three areas: preparation, prevention, and response.