Security policies and implementation issues