Prerequisites

1. Organization Owner/Admin
   
2. Security Admin role
   

To add security policy:

1. Sign in to Zoho Directory, then click Admin Panel.
   
2. Click Security on the left menu.
   
3. Select Security Policies, then click Add Policy. 
   
4. Enter a name for your policy, then select the members you want to apply the policy to.
   
5. Select if any users should be excluded from the policy, even if they are part of the selected groups.
   
6. Select the priority of this policy with other security policies. 
   
7. Click Next.
   
8. Enable Set password policy if you need it, and configure the Password Policy. 
   
9. Configure Lock period settings and Session limit. 
   
10. Click Add. You may be asked to verify your identity by re-authenticating yourself.