Why do you think creating a Policy and Procedures manual is important for Information Security in a business

Why do you think creating a Policy and Procedures manual is important for Information Security in a business.
APA FORMAT AND I NEED REFERENCES