---
title: "Implement enterprise security controls"
description: "Index of Calico Cloud tutorials that build enterprise security controls including namespace isolation, global egress, default deny, and platform-tier policy."
product: "Calico Cloud"
version: "v23.0.1"
section: "Tutorials"
canonical_url: "https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/"
---

# Implement enterprise security controls

## [📄️Namespace isolation and access controls](https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/namespace-isolation.md)

[Step-by-step tutorial for isolating namespaces in Calico Cloud using global network policies with Pass rules in a security tier across business units and environments.](https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/namespace-isolation.md)

## [📄️Global egress access controls](https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/global-egress.md)

[Step-by-step tutorial for building cluster-wide egress access controls in Calico Cloud using global network sets, domains, and team-scoped policy.](https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/global-egress.md)

## [📄️Global default deny policy](https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/default-deny.md)

[Step-by-step tutorial for staging and rolling out a global default-deny policy in Calico Cloud so unwanted ingress and egress is blocked across the cluster.](https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/default-deny.md)

## [📄️Platform application access controls](https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/platform.md)

[Step-by-step tutorial for securing platform-tier applications in Calico Cloud with ingress and egress controls for storage, secrets, and monitoring workloads.](https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/platform.md)
