[Willy Vazquez]

Good post Caleb!
I agree all three of those polices are very important for any company to implement into their structure. These policies are simple but effective, not allowing users to access whatever they want, making passwords hard to guess/crack, and being able to respond to incidents are great ways for companies to keep their data safe.