Security Policy

I am a Network Engineer whose been tapped to create a network access/security policy for an ISP. Is there anyone out there who has successfully completed this task and give me some advice, lessons learned, case study(documents), etc on this.

Regards
EG