For a business operating in a competitive and evolving online market, it is MOST important for a security policy to focus on:

defining policies for new technologies. 

enabling adoption of new technologies. 

requiring accreditation for new technologies. 

managing risks of new technologies.