Bethel Managing IT Professionals Discussion

I need help with a Management question. All explanations and answers will be used to help me learn.  Is it necessary for an organization to have an information security policy and an acceptable use policy? If so why, if not why not?