Policies :
 

Any security plan must start with a sound set of security policies. The policies must not only be written, but endorsed by senior management and communicated to each employee that the policy affects. There is no need to generate security policies from scratch. There are a number of web services available where you can download editable policies enabling you to customize them to meet your specific environment. http://www.network-and-it-security-policies.com is an example of a location that charges a nominal fee for their complete set of policies.