In forming a security policy development committee, it is critical to include only members of the cybersecurity team, as they understand the technology concerns the best.