Do You Have A Written Security Policy?

---

Looking at existing policies is a good way to get ideas. SANS has a library of samples:

http://www.sans.org/security-resources/policies/

It is critical to have a written security policy before you implement it.