The development of security policies and regulations is becoming increasingly critical as organizations recognize the importance of information security. These business rules define procedures to be used within the organization to maintain its security posture and to prevent and respond to security incidents.Policies include mechanisms to promote proper computer and network use and data handling procedures for proprietary or sensitive data.