The foundation of a secure organization (cybernetically speaking) is based not only on the technologies that are implemented. If not that much of the security of information and cybersecurity is based on the order that is had at the operational level in the organization. How do you get to have an order and bases established for the security of the organization? Basically creating the policies and procedures that must be followed to ensure the confidentiality, availability and integrity of the organization and the information with which it operates day by day.