Quick and dirty guide to security policy creation

Your IT and information security processes should support your business activities. They should fit in with your organisation and be aligned with your goals, technologies, staff and capabilities.