Merely establishing a security policy or installing security devices is not enough to avoid risks. It is most important that all security measures are up-to-date, and that they are correctly implemented. There are many cases where employees or family members neglect the rules set by security policies simply because they do not appreciate them. Sometimes policies need to be revised, for example to match organizational restructuring.
The best way to maintain a security management system at optimum level is to have a third party professional assess the system on a regular basis. OSC will be at your service to assess, revise and improve your security practice.