Development of security policy