A policy defines how the agent handles malware. For example, automatically quarantine malware or ignore it if in a specific folder.