PODCAST: Security Policy: Fact Fiction or Implement the Marquis de Management

**Executive Summary:** This document consists of podcast show notes for a CJ Cox presentation on security policy, outlining why policies matter, a practical methodology for writing concise and enforceable policies, resources and templates (e.g., SANS, books), a recommended structure (scope, roles, definitions, policy text, versioning), review and training processes, and advice for small organizations; it is guidance/training content rather than an incident report.