SANS: Security Policy Templates (sans.org)

Thanks for the link, it's really helpful.

Just wondering is there any good reference books on designing and writing ICT security policy including backup strategy?