A newly appointed information security manager has been asked to update all security-related policies and procedures that have been static for five years or mor...