Excellent point, John. I wonder how many times an auditor has asked top management if THEY know if the policy is deployed, how THEY know people know it and, if THEY know if it's appropriate to their business! Commitment to EXCEEDING EXPECTATIONS (a commonly found, trite statement) is all very well and dandy, but can it be DONE?