Policy recommendations

  Imagine that you are the director of security services at a medium-size company. What policy recommendations would you propose to upper management concerning the use of the company's networked computers? What are some potential vulnerabilities that management should be aware of, and what are some solutions?