Generally, the central security management groups were responsible for developing written corporatewide policies in partnership with business managers, internal auditors, and attorneys.
The central security management groups are known for not dealing with anything regarding policies.