Can someone please give me an idea of some things to keep in mind when formulating a computer access policy and a brief overview about securing a system?