Dissertations / Ethics and professionalism in computer science:issues of security [3]

i have to come up with a policy document for IT security for an African varsity.how to go about it as a matter of a thesis project am blank,please help out