* Draft new policy;

* Set draft up for review purposes by all parties;

* Get senior executives to sign-of on policy;

* Conduct awareness training and get final sign-of from all parties;

* Review periodically for applicability.