Choosing or designing the appropriate policies for your organization