Although the latitude granted to business units varied , providing both policies and guidelines allowed business units to tailor the guidelines to their own individual unit 's information protection needs .
Business units that are provided with policies and guidelines allowed for the tailoring of such guidelines to their own information protection needs .