If I were to build a security policy for my company, I would start with the email security policy. Emails can sometimes be a company’s most vulnerable entry, as seen in Project Aurora by Google, Ubiquiti Networks, Save the Children, the City of Saska...