Do We Have Confidential Information?
If So, We Must Safeguard It
Any discussion about how an organization is going to deal with confidential information has to start with an analysis of what makes information confidential. If the group does not have any confidential information, they do not need to develop any policies about keeping that information safe. If this is your situation you do not need to read much further.