Every organization needs a security policy.  The security policy forms the basis for efforts to secure a network and should outline what the company expects.  Cisco has introduced a free tool that will generate a security policy based on the answers to some basic questions.  If your organization doesn't currently have a security policy in place, I suggest you check it out!  Of course, any discussion about policy generation should also include a link to the SANS Institute Security Policy project - an excellent collection of advice and templates.