Why Create a Network Security Policy

Defines technologies that can and cannot be added to the network

Provides the procedures to follow in case of a security incident

Defines which practices and behaviors are acceptable and which are not

Defines the sanctions for violations of the policies

Provides a process and targets to audit existing security

Defines responsibility throughout all levels of the organization for implementation, monitoring/auditing, sanctioning, funding, and supporting the policies

Creates a basis for an enforceable legal action