text: The organizations viewed information security policies as the foundation of their information security programs and the basis for adopting specific procedures and technical controls .
  
  ###
  
  Security policies are the foundation of those organizations ' information security programs .