Research the IT security policy used by your university or by some other organization you are associated with.
Identify which of the topics listed in Section 14.2 this policy addresses.
If possible, identify any legal or regulatory requirements that apply to the organization. Do you believe the policy appropriately addresses all relevant issues?
Are there any topics the policy should address but does not?