Why Should You Enforce a Network Security Policy?