This Product Security Policy is deliberately created to be easily adoptable by as many Organisations as possible. You will have to add policy objectives that meet your Organisation’s own specific Compliance Obligations. It’s possible that we have already created extensions to this policy that meet common Compliance Obligations for Organisations that will make this easier for you. Check before authoring your own.