Policies are applied to incoming requests in the order that they are displayed on the main policy page. When the Oracle Certificate Authority policy processor module parses policies, those that appear toward the top of the policy list are applied to requests first. Those that appear toward the bottom of the list are applied last and take precedence over the others. Note: only enabled policies are applied to incoming requests.