> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dfns.co/llms.txt
> Use this file to discover all available pages before exploring further.
# Create policies
> Replicate your internal approval and risk controls in Dfns by configuring policies for transfers, signing, permissions, and policy changes.
export const Youtube = props => {
return ;
};
Policies are a programmable set of safeguards behind all actions on the Dfns infrastructure. You can configure them to validate actions taken in your organization. For more details, please read the dedicated section: [policy-engine](/core-concepts/policies)
**Pro tip: initial policies you should create**
We recommend setting up three initial Policies in order to lock down your organization:
1. **Permission Assignment:** requiring quorum approval before assigning permissions to any user. This way a rogue admin cannot create fake users with elevated permissions by himself.
2. **Permission Modification:** ensure permission sets cannot be modified without quorum approval, to prevent a rogue actor to elevate existing roles by whitelisting extra actions.
3. **Policy Modification:** a policy preventing to change policies. That's to make sure your established policies stay in place and a quorum approval is required for modifications.
Those are actually the first 3 options available when you follow the policy creation flow on the dashboard.
In this example, we are going to control transactions whitelisting specific recipient addresses, and requiring approvals for others.
On the dashboard, head to `Org > Policies` (direct link: [https://app.dfns.io/policies](https://app.dfns.io/policies)) and click ➕ New Policy.
What should the policy apply on? For our example, select "Wallet usage (transfer, transaction, signature)"
In which case should the policy trigger? For our example, select "Transaction recipient whitelist", then click Configuration and paste the whitelisted destination wallet address. All transactions to this wallet address will go through, while all others will trigger the policy.
When a transaction triggers the policy filters, then there are different actions you can take. In our case, we'll request approval from another employee. Select "Request Approval", and add an "Approver" group, with a quorum of 1, then click "Any Employee" and select the employee who should approve the transaction.
The user triggering the action can never approve it himself. Make sure the approvers are not the same users who will issue the requests!
Hit "Continue", give a name to your policy, and keep going until you get to the Summary. Click Save and 🔑 sign the request with your passkey.
You've created a policy requiring approval from your coworker on transaction requests, except transfers to the designated wallet. Refine these rules and add as many as you need to match your internal policies and safeguards.
