A security policy is a collection of rules, guidelines, and checklists. Network technicians and managers of an organization work together to develop the rules and guidelines for the security needs of computer equipment. A security policy includes the following elements:

A security policy should describe how a company addresses security issues. Though local security policies may vary between organizations, there are questions all organizations should ask:

NOTE: To be effective, a security policy must be enforced and followed by all employees.