A documented cyber security policy communicates to its employees and supervisory authorities on the measures implemented to prevent cyber security threats and incidents. The document also educates the employees on their conduct or behavior towards digital security while executing their day-to-day responsibilities. For example what is expected of the employee while working from home. What actions to take on detecting suspicious emails, what are the actions to be taken before an employee is relieved of organization duties , Firewall policies, Password policies etc. Generally, it identifies the critical assets of the company viz. Infrastructure, Applications, Network and cloud infrastructure that employees and authorities need to know.