Policy Maintenance

Policy maintenance should be minimal. If you assign the majority of your policies to the highest hierarchical level (Device Class, User Group) and plan for exceptions, then policies require no maintenance - even when new devices are added to the market or new endpoints or users are added to your organization. Policy changes are only needed when your business needs change.

If you find that you frequently need to make changes to policies, there is likely a better strategy for your policy design.