Yes. Sonatype provides a set of sample policies that can be imported to either your organizations or applications. You'll want to take a look at Policy Management in the documentation.
Security updates: eMudhra certificate incident and PHP2Shell: Sonatype is aware of the eMudhra certificate incident and the PHP2Shell vulnerabilities. We are updating our products to address the eMudhra issue and have confirmed that Sonatype products are not impacted by PHP2Shell. Read Sonatype's assessment and guidance