Security policies are much more than rules regarding corporate systems and documents. They limit liability and outline an entire culture built to minimize the loss of data. Many business members forget that even the most mundane of data gathered in interactions with customers can be valuable, and not storing data properly, either on your own machine or the cloud can provide a growing risk of being targeted. It’s important to note that security policies aren’t static documents either, but rather entire systems built around establishing security goals, enacting and enforcing policies, and monitoring progress. Make sure to keep open lines of communication between those establishing security procedure and the rest of the business so as to obtain buy in and minimize oversights from either side.