ISSP - Help on starting this what is good way to do so.

Background information

Recently (in 2015) both Mr. Billingsley, Senior and Mr. Boscovitch retired from the business leaving William Billingsley II (a.k.a. Junior) in charge of the business. Junior has an MBA and a BSBA in Entrepreneurship, with a minor in IT from the Atlantis University of Technology. Juniors first order of business was to update the almost obsolete IT infrastructure and telephony systems in all stores and the corporate headquarters. His next task is to improve the information security of the corporate headquarters. Executive Staff The current CEO, William Billingsley, Jr. oversees all operations at corporate headquarters and all 5 regional stores. The managers of the regional stores actually report to the COO, who reports to the CEO. The current CFO, James McNathy, oversees all financial operations at corporate headquarters and all 5 regional stores. The Senior Accountant reports directly to the CFO. The Current COO, Grace Williams, oversees all corporate and branch operations, including sales, procurements and distribution. The managers of all 5 stores report to the COO, as does the Managers of Purchasing, Sales, Distribution, HR and IT.

1. STATEMENT OF PURPOSE

The ISSP should begin with a clear statement of purpose that outlines the scope and applicability of the policy. It should address the following questions: What purpose does this policy serve? Who is responsible and accountable for policy implementation? What technologies and issues does the policy document address? In this ISSP we are addressing the responsible use of company computers & networks.

a. Scope and Applicability

b. Definition of Technology Addresses

c. Responsibilities

2. AUTHORIZED USES

This section of the policy statement explains who can use the technology governed by the policy and for what purposes. This section defines fair and responsible use of equipment and other organizational assets, and it addresses key legal issues, such as protection of personal information and privacy. The policy makes any use for any purpose not explicitly identified a misuse of equipment.

a. User Access

b. Fair and Responsible Use

c. Protection of Privacy

HELP!!