The types of policies you should have depends on what your organization does, its size and the level of regulatory compliance in your industry. The fundamental purpose of policies and procedures is to control risks. They provide the rules that govern how your employees interact and get things done in a manner that creates the best result for your organization. Common policies address: computer use and emails; privacy of personal information; data management; harassment and discrimination in the workplace; conflicts of interest; whistle blowing; document retention; delegation of financial authority; timely financial reporting; procurement; contracting; travel and reimbursement of personal expenditures; fraud and theft reduction. Then there are the policies that address the specific compliance requirements of your industry. If you need help writing your policies and procedures, or if you just want someone to vet them, please give me a call.