TechRepublic has had some great articles on the subject of writing and implementing IT policies, including the following:
“Grab the top policy downloads for IT managers”
https://www.techrepublic.com/article.jhtml?id=r00620010202wtn01.htm&src=search
“E-mail retention policy and practice”
https://www.techrepublic.com/article.jhtml?id=r00620010110ggp01.htm&src=bc
“Policies and procedures: The backbone to a strong security model”
https://www.techrepublic.com/article.jhtml?id=r00620010814aue01.htm&src=search
Go up to the search area on this TechRepublic page, and enter IT policies, computer policies, or anything similar, and you’ll get scores of articles, links, downloads, and discussions on the subject.
Also, see this link:
"IT Security Policies & Network Security Policies - How to Deliver Them!"
http://www.network-and-it-security-policies.com/
>> REMOVE SPACES from the pasted URLs <<
As far as litigation due to the lack of proper policies, there have certainly been cases of that.
See these links:
"Case of Good Intentions with Bad Results"
http://www.onlinesecurity.com/Services/Security_Policies/CaseStudy_1.php
Also, people have claimed to have been unjustly fired because of "lack of policy", companies have lost intellectual property, and the examples could go on.
Maxwell
Good luck,
Maxwell
