CHAPTer 1 Information Systems Security Policy Management F OR AN ORGANIZATION TO WORK WELL it requires business processes that are reliable, keep costs low, and obey the law. Most organizations use policies and procedures to tell employees what the business wants to achieve and how to perform tasks to get there. This way each result is similar to the last. In a perfect world, policies and procedures would always produce the perfect product. This requires employees to follow policies and procedures at all times. However, we do not live in a perfect world. Neither policies nor procedures are always perfect nor do employees always follow them. Anyone who has cashed a check at a bank understands what a basic procedure looks like. A check-cashing