Rules for a successful security policy

Computer World called them "10 steps" but they're more like "rules of thumb". In any case, they're make up a good guide for having an enforceable security policy.