A security policy is the cornerstone of information security. A complete and comprehensive set of security policies and procedures will serve as the baseline requirement for your enterprise to secure its information. It will inform your users of their responsibilities, and will allow your technical staff to develop a roadmap towards compliance.