A security rule set can contain a combination of rules that perform different tasks. You can add security rules that mask data, block requests, rewrite the SELECT statement, or replace a part of the SELECT statement. To organize rules within a rule set, you use rule folders to group security rules that apply the same action. For example, group rules that use the mask action in one rule folder, and group rules that use the block action in a different rule folder.