A cyber security policy defines the direction and nature of a company’s approach to security. Every individual has a role to play in helping to support a mature security program.