Policies

Written policies your auditor expects to see. Edit the drafts to fit your organization, then adopt each one — the adopted content is RFC 3161-timestamped so the version and adoption date are verifiable.