Security Policy and Benefits

A network security policy does not dictate how a business runs. Rather, the
business needs dictate the security policy. The policy does not dictate the
exact equipment or configuration to be used; instead it provides guidance to the
administrator.
Once a security policy is implemented the company will see a number of
benefits including :

  
A framework from which all security efforts are built.
  
Lessened uncertainty about whether an action is permissible.
  
A basis for punitive action to be taken in case  of  policy
violations
  
A comprehensive system for auditing security efforts.