Question d’entretien chez Form3

How would you write a security policy document (e.g. cryptographic policy)?