major components of an IT or cyber security policy

Based on your reading and on additional research on line, what are the major components of an IT or cyber security policy?  If you work for a company are you aware of what the policy is for the company?  Please describe it and if it corresponds to the reading or your research.

If you have not or are not working in industry, pick either the school, a bank you do business with or other company whose policy you can view and evaluate it.  

Write a 2 to 3 paragraph synopsis of what you found and your analysis.  It must be less than one page. This will be 8 of the 10 points.

Once submitted, comment on at least one other student's post.  Saying "I agree" or "Nice post" is not adequate. Be sure to say why you agree or disagree with what they wrote.