Well, just as a suggestion, I have found SANS to be quite helpful in the past. Maybe there is a way to contact them and put the question to them. If they don't have a policy to share with you, maybe they would be willing to create a 'generic' one and post it on their website for you and others to download. Like I said, it's just a suggestion, they may tell you to take a hike but it don't cost anything to ask.



DjM