Security policy is the formal documented plan of an organization that defines its goals, policies, objectives, and procedures for information security. Once the company achieves scale, it is essential to devise this document as it will serve as a handbook in case of security breaches and the most critical elements to take note of. This policy varies from business to business as some businesses are data-heavy by nature, and security plays a vital role in their success. In fact, with the increasing influence of GDPR, some companies have also been asked to pay hefty penalties in the event of failure to protect customer data