I need at least 200 words for this answer. Please don't worry about formatting. It's only a discussion:
Well-managed information security programs include the development and enforcement of information security policies. There is, however, a fair amount of diversity in how government agencies and organizations approach the task of creating and enforcing information security policies.
Answer the following:
Describe the steps to choosing the appropriate security policy selection and organization that an organization will implement.
Identify the roles and responsibilities that are appropriate for information security policy creation team members.
Explain what mechanisms will be included in the policy creation process to ensure fair and equitable enforcement of these policies once implemented.