This policy describes principles and rules for network and cloud security. The policy aims to: provide rules for designing networks and encrypting data in transit; and regulate the cloud security responsibility model.