I'm up to my eyeballs in Sorbanes-Oxley compliance meetings.
"So... do you have policies regarding best practices?"
"Yes."
"Are the published?"
"Yes."
"Do you have a mechanism to track who has read and agreed to the policies?"
"Yes".
"So what controls do you have in place to ensure that the policy on... document classification... is always followed?"
[sigh]
[bang]
[reload]
Well... outta here for the evening...
Niters all... :-)