A policy defines how the agent handles malware it encounters. For example, automatically quarantine malware or ignore it if in a specific folder.