CMGT/433: Cyber Security - Discussion: Security Policies

Respond to the following in a minimum of 175 words: 

Many organizations lack a clear and concise security policy. Without a policy there is often an inconsistency in security focus by employees and management and increased opportunities for experiencing security incidents.

Search the internet for two companies' policies. Analyze the policies to determine commonalities. What would be your top three concepts that should be included in an organizational security policy mission statement? Explain your reasoning for your listed three concepts.