ABSTRACT
This chapter introduces the reason why organizations write security policy. Aside from discussing the
structure and format of policies, procedures, standards, and guidelines, this chapter discusses why
policies are needed, formal and informal security policies, security models, and a history of
security policy.
