> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dfns.co/llms.txt
> Use this file to discover all available pages before exploring further.
# Create policies
> Configure your first Dfns policies so internal approval and risk controls are replicated in the platform before you start moving funds.
export const Youtube = props => {
return ;
};
Policies are a programmable set of safeguards behind all actions on the Dfns infrastructure. You can configure them to validate actions taken in your organization. For more details, please read the dedicated section: [policy-engine](/core-concepts/policies)
**Pro tip: initial policies you should create**
We recommend setting up three initial Policies in order to lock down your organization:
1. **Permission Assignment:** requiring quorum approval before assigning permissions to any user. This way a rogue admin cannot create fake users with elevated permissions by himself.
2. **Permission Modification:** ensure permission sets cannot be modified without quorum approval, to prevent a rogue actor to elevate existing roles by whitelisting extra actions.
3. **Policy Modification:** a policy preventing to change policies. That's to make sure your established policies stay in place and a quorum approval is required for modifications.
Those are actually the first 3 options available when you follow the policy creation flow on the dashboard.
In this example, we are going to control transactions whitelisting specific recipient addresses, and requiring approvals for others.
On the dashboard, head to `Org > Policies` (direct link: [https://app.dfns.io/policies](https://app.dfns.io/policies)) and click ➕ Create Policy.
What should the policy apply on? For our example, select "Wallet usage (transfer, transaction, signature)"
In which case should the policy trigger? For our example, select "Transaction recipient whitelist", then click Configuration and paste the whitelisted destination wallet address. All transactions to this wallet address will go through, while all others will trigger the policy.
When a transaction triggers the policy filters, then there are different actions you can take. In our case, we'll request approval from another employee. Select "Request Approval", and add an "Approver" group, with a quorum of 1, then click "Any Employee" and select the employee who should approve the transaction.
The user triggering the action can never approve it himself. Make sure the approvers are not the same users who will issue the requests!
Hit "Continue", give a name to your policy, and keep going until you get to the Summary. Click Save and 🔑 sign the request with your passkey.
Congratulation! you have created a policy requesting approval from your coworker when a transaction is requested, unless it's for transferring to the designated wallet. You can refine these rules and add as many as you need to match your internal policies and safeguards.
From there, your organization is already well configured, you are good to start really using Dfns! Next step is to create wallets and use them!
Depending on what you want to do, you can use different routes here:
Create wallets that you (or your team) will manage manually.
Manage wallets and the Dfns platform programmatically.
Get started with delegated wallets.
