As a result , developing a comprehensive set of policies was one of their first steps in establishing an effective corporatewide security program .
corporate security cannot be achieved before developing policies .