Have you looked at the organization policies, do they need to be updated? When was the last time they were updated?
a) Yes
b) No