Developing a policy is an art where multiple blocks are assembled together into a framework. This takes a lot time and several revisions. There are two different approaches used to deploy a policy. One approach is the top-down approach and the other is the bottom-up approach. Also, make sure that the new policy balances the current practices of the organization. Finally, the policy should be efficient and it should contain mechanisms to protect the organization against different types of potential attack.