4.6.1 GP 2.1 Establish an Organizational Policy