Explain the steps involved in implementing a security policy within an organization, where is the most obvious chance for error?

Explain the steps involved in implementing a security policy within an organization, where is the most obvious chance for error?