Review the policies you have, looking for signs of weakness.
Rewrite the policies so that people understand why compliance is important.
Obtain buy-in from senior management, and enlist their aid in making the policies public.
Write at least the policies we describe here, using the resources above for additional guidance, and pay special attention to the languageshow how assets and information have value.