Write down the security policy document of less than 1000 words for business which operates web site which sells books.
(Hint: You may like to use NSTISSC model by analyzing each of cells (i.e. 27 cells related with McCumber model) and write short statement on how you would address three components represented in that cell. Though, you may select any security model which you feel is suitable.)