In order to determine what "security virtualization" really means, it is useful to understand how companies define and enforce their security and accompanying compliance policies today. In defining a security policy, companies must identify what it is that they want to protect. Some assets and communications are more important than others. For example, a set of print servers on one segment of the network may not require stringent security protections; however, when data is extracted from a finance database, a much stricter set of conditions is likely to apply. Thus, the security policy becomes the set of business rules by which processes, people and technology are applied to affect asset protection goals.