The awesome folks at SANS offer free policy templates to use and modify to your own needs. There’s no excuse for not having policies; remember to include your legal representative and get their input.
Some excellent starting policies to look at:
The Canadian government also offers excellent best-practices and guidelines.
Some quality ones to look at first:
Application Whitelisting is how high security organizations operate. We will see more and more organizations take this on because of the gigantic benefits; including but not limited to, preventing malware from executing, preventing unlicensed and/or unapproved software.