Collaborative security policy development

A case study