Your company uses Google Cloud and needs to enforce consistent security policies across all production environments while ensuring minimal disruption. The IT team wants to test organizational policies in a safe environment before applying them to the production hierarchy. What should you do?