An organization has purchased an Internet sales company to extend the sales department. The information security manager's FIRST step to ensure the security pol...