Security policy paper

Must include:
1. Control Matrix: A listing of the risk and 1 or more countermeasure to address the risk.
2. A Section that identifies the necessary components of the policy and why they are important: This does not refer to the controls but more specifically sections within the policy.
3. The actual policy, when developing the policy please ensure that it can be used at XYZ Healthcare.