IT security policy is a set of in-house rules that cover the IT infrastructure of the organization, regulating the security measures related to the IT system, and forming an integral part of the rules of operation and procedure of the organization. Technical and administrative measures need to cover the relevant elements of the system, ensuring that the observance of the rules and the technical support provided will reduce the effect of risks and threats to the IT system to an acceptable level. We have numerous references in the area of security policy at companies and minor financial institutions.