This policy outlines security requirements for home computers used for both personal and company purposes. It states that all information, regardless of format, should be properly secured. The policy defines personal information security and notes that it is achieved through implementing controls such as policies, processes, and technical safeguards. These controls need to be established, monitored, and improved to ensure the security objectives of the organization are met.