A device, comprising: one or more processors configured to: receive (105, 410) information identifying a set of conditions and a set of corresponding security actions, the information identifying a set of conditions being received from a client device; determine (120, 420) a set of security rules that is to be controlled by the set of conditions, the set of security rules being included in a network security policy; modify (135, 430) information related to the set of security rules stored in a data structure such that the set of conditions controls implementation of the set of security rules, the set of security rules having not been associated with the set of conditions prior to modifying the information related to the set of security rules, the modification thereby configuring the device to process the set of security rules to dynamically implement the set of security actions based on satisfaction of the set of conditions; after modifying the information related to the set of security rules: perform (145, 440) an action to monitor a network to determine whether the set of conditions is satisfied; and perform a security action of the set of security actions based on whether a condition of the set of conditions is satisfied and based on whether the set of security rules applies to traffic. receive (105, 410) information identifying a set of conditions and a set of corresponding security actions, the information identifying a set of conditions being received from a client device; determine (120, 420) a set of security rules that is to be controlled by the set of conditions, the set of security rules being included in a network security policy; modify (135, 430) information related to the set of security rules stored in a data structure such that the set of conditions controls implementation of the set of security rules, the set of security rules having not been associated with the set of conditions prior to modifying the information related to the set of security rules, the modification thereby configuring the device to process the set of security rules to dynamically implement the set of security actions based on satisfaction of the set of conditions; the set of security rules having not been associated with the set of conditions prior to modifying the information related to the set of security rules, the modification thereby configuring the device to process the set of security rules to dynamically implement the set of security actions based on satisfaction of the set of conditions; after modifying the information related to the set of security rules: perform (145, 440) an action to monitor a network to determine whether the set of conditions is satisfied; and perform a security action of the set of security actions based on whether a condition of the set of conditions is satisfied and based on whether the set of security rules applies to traffic. perform (145, 440) an action to monitor a network to determine whether the set of conditions is satisfied; and perform a security action of the set of security actions based on whether a condition of the set of conditions is satisfied and based on whether the set of security rules applies to traffic.