Policies: The foundation of all effective information security programs is sound information security and information technology policy.<br/><br/>What does 'sound' mean on that context?