Good Policy before Security.

Policies and Procedures