In order to present any kind of security policy for the management, it is significant in identifying certain elements of it. Information security policies provides comprehensive explanations regarding why they needs to take certain decisions and explain the importance of resources (Barman, 2001). It is significant when formulating policies considered at least the following:
Meeting with the owners for the resources departments, as they have the experience and are the main source for establishing the scope and defining policy violations
Communicate to all personnel involved in the development of policies, ...