Why should an organization have IT security policies and procedures? Provide details to support your answer

Why should an organization have IT security policies and procedures? Provide details to support your answer.Include references to support your answer in APA format. Should an organization’s IT security policies and procedures be documented? Provide details to support your answer.Include references to support your answer and reason in APA format. Why do you think an education / training program is necessary for the IT support staff? Provide details to support your answer.Include references to support your answer and reason in APA format.Please use online references. Do not use books or journals.