 Implementation of the policy organization wide either internally or via outsource by internationally experienced organization after discussion between management and internal audit. (This will ensure that all the matters especially which have inherent risks are covered and can be tipped off if required).