E-mail and Security policies

I am working with a customer who has not had anytype of policy regarding business email vs. personal email (sent on a business email address).

Additionally, they do not have a policy on loading their own (most cases unlicensed) software at their workstations or "evaluating" business software at home.

Any help would be greatly appreciated.

Thanks