University policy might not generally be considered an interesting topic of discussion but when understood in context it becomes clear how important, maybe even how interesting, it really is. Instead of reviewing policy line-by-line, we will present examples of how policy applies in practice and what risks can occur if policy isn't followed. We will address how to think about policy as a daily discipline in better security, rather than just a set of rules that need to be memorized and followed.