The University of SydneyPage 28Formulation of a Good Security Policy–An organisationincorporates the strategic direction of the company both at a micro and macro levels–Clarification of the strategic agenda sets the stage for developing the security model–The security policies determine the processes and techniques required to provide the security but not the technology–The implementation of security policies entails the development of procedures to implement the techniques defined in the security policies–Security processes and techniques should be monitored constantly–A response policy is an integral part of a good security policy–Establish procedures and practices for educating all stakeholders