Policies and Procedures

I have recently accepted the position of Network Administrator for a small company of 35 users. We have NT 4.0 file server (no domain) with log in thru Win 95/98, Linux for email and Unix for internet, but no policies or procedures of any kind exist. I feel it’s important that something be set in place to maintain the security and veracity of the system, especially when it comes to Network administration, upgrading of equipment, software/hardware acquisition, internet/email monitoring , reportsetc. Can anyone point me in a direction that will be helpful?