Generally, the central security management groups were responsible for developing written corporatewide policies in partnership with business managers, internal auditors, and attorneys.
The central security management groups in addition to developing written policies also make webinars going over them.