45. What about exceptions It is easier to write and control exceptions, than it is to write policies custom to situations. With exceptions, the ownership is on the auditors to reconcile policy differences.
46. Let’s look at the check list Upper management IT and middle management IT and individual departments DON’T forget user training
47. Let’s look at some policies Corporate Assets Acceptable Use Network Security