You can have all the policies, procedures and good intentions in the world, but if they are not put into practice and reviewed on a regular basis, how can they be considered genuine?
