A security policy is established to maintain a secure work environment that safeguards the assets of the company, periodically reviews se curity levels and protects the use of information so as to reconcile the best interests of the com pany with legal and regulatory requirements.