[Brian]

You make a category.
You make a forum.
You set the parent for the forum to be the category.
You set the permissions.

You have to set individual permissions for each forum. IE, Admins, Mods, Users, Guests call all view the forum etc.