====== Start with a policy or trust model ======
  * [[http://www.sans.org/security-resources/policies/|resources from the sans institute]]