Although the latitude granted to business units varied, providing both policies and guidelines allowed business units to tailor the guidelines to their own individual unit's information protection needs.
Business units that are provided with policies and guidelines allowed for the tailoring of such guidelines to their own information protection needs.