The University of SydneyPage 7Learning Objectives–Understanding of …–key aspects of formal information system security–structures of responsibility–organisationalbuy-in–the importance of security policies–characteristics of security policy formulation