An organization’s cyber security policy defines the direction and nature of a company’s approach to security. It sets out which assets should be protected, the potential threats to those assets and the security controls that should be implemented to address them. Establishing a new policy involves careful consideration of key aspects of cyber security, such as employee training and awareness, controls, email security, confidential data and other areas. It is important to perform cyber policy reviews on a regular basis or if your organization has recently undergone expansion, has been acquired or is due to take on a new partner.