Having the policy doesn't preclude the audit or questionnaire requirement does it? This just puts the answers in one place?
The compliance pros still want all their ceremony - it's most of what they sell.
The compliance pros still want all their ceremony - it's most of what they sell.