Thinking about the real or fictitious company, develop a security policy manual that includes:

Password update policy

Access policy to the physical spaces where the company's critical IT infrastructure is located

IT staff training policy

Policy on the use of the company's IT resources

Policy of acquisition or development of new software for the company

Hardware acquisition policy in the company

Organizational chart that establishes the company's responsibility and authority in information security matters