> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/content-collections/governance/governance.md).
# Governance
Learn about the different types of Prisma Cloud policies and how to manage them.
In Prisma Cloud, a policy is a set of one or more constraints or conditions that must be adhered to. Prisma Cloud provides predefined policies for configurations and access controls that adhere to established security best practices such as PCI, GDPR, ISO 27001:2013,and NIST, and a larger set of policies that enable you to validate security best practices with an impact beyond regulatory compliance. These Prisma Cloud default policies cannot be modified.
In addition to these predefined policies, you can create custom policies to monitor for violations and enforce your own organizational standards. You can use the Default policies as templates to create custom policies. After you set up the policies, any new or existing resources that violate these policies are automatically detected.
Prisma Cloud includes out-of-the-box (OOTB) policies that are part of the Prisma Cloud Recommended Policies Pack.
## Governance at a Glance
| **What do you want to do?** | **Start here** |
| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Monitor your resource configurations for potential policy violations | [Create a Configuration Policy](https://github.com/PaloAltoNetworks/pc-docs-md/tree/main/enterprise-edition/content-collections/governance/create-a-policy.xml#create-a-config-policy) |
| Monitor and flag audit events in your environment for potential policy violations | [Create an Audit Event Policy](https://github.com/PaloAltoNetworks/pc-docs-md/tree/main/enterprise-edition/content-collections/governance/create-a-policy.xml#create-an-audit-event-policy) |
| Assess the possible attack paths that exploit your environment in a graphical representation when an attack path policy is violated | [Create an Attack Path Policy](/content-collections/governance/attack-path-policies.md) |
| Enforce IAM policies to your resources and regulate access to only authorized users | [Create an IAM Policy](/content-collections/governance/create-an-iam-policy.md) |
| Enforce network rules to govern the behaviors of network devices | [Create a Network Policy](/content-collections/governance/create-a-network-policy.md) |
| Identify unusual user activity in your environment | [Create an Anomaly Policies](/content-collections/governance/anomaly-policies.md) |
| Detect misconfigurations and provide automated fixes for security issues seen across your integrated code repositories and pipelines. | [Custom Build Policies](https://github.com/PaloAltoNetworks/pc-docs-md/tree/main/enterprise-edition/content-collections/governance/custom-build-policies/custom-build-policies.md) |
| Workload Protection policies
- Create vulnerability policies for hosts and create host rules to apply these policies on
- Create vulnerability policies for containers and create container rules to apply these policies on
- Create vulnerability policies for Serverless functions
| Workload Protection Policies
Vulnerability Management Policies
|
| Detect potential threats across your environment | [Prisma Cloud Threat Detection](/content-collections/governance/prisma-cloud-threat-detection.md) |
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://docs.prismacloud.io/content-collections/governance/governance.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.