Folks, you don't get anywhere with information security without a base of properly considered and written information security policies. How do you train or enforce when the requirements and guidelines aren't clear? Information Security policies are how you draw the lines.