Define how much risk you are willing to tolerate.
Installing the Webhook
How to enable enforcement.
How to manage policy exceptions.