For example, the utility company developed quarterly reports on compliance with organizational policies, such as the number of organizational units that had tailored their own information protection policies as required by corporate-level policy.
There is a lack of protection policies.