An organization’s security policies are the greatest drivers of the organization’s attitude towards security; if these policies are poorly made, then no one in the organization will ever take security seriously. They lay the basic groundwork for good security policies and an overall responsible attitude towards security. Some of the policies that need to be fine-tuned to optimally meet both your business and security needs are the Password Policy, the Email Policy, the Internet Access Policy, the Patch Management policy, the Incident Response Policy etc.