Defining Security Baselines And Guardrails With Access And Organization Policies