What is your approach to developing and documenting standard operating procedures that enforce policy application?