I think a policy frame work would be great especially taking it from two
perspectives.

One using a centralized regulatory model where policy directives are
pushed out to other departments or business units. The other based more
on the ISO and COBIT type standards.

The issue I see with mapping in ...

[ more ]