Over time , policies and procedures may become inadequate because of changes in threats , changes in operations , or deterioration in the degree of compliance .
Policies and procedures are expected to be future proof .