In this episode we talk about policies and procedures. We explain what they are, and why we need them. We also talk about how they apply to information security.