2767881 comment Comment shouldn't a policy most importantly.... (Score 1) 70 by helveticaINspace on Friday June 13, 2008 @02:58PM (#23783009) Attached to: Building an Effective Information Security Policy Architecture ...reflect the risk tolerance of the business?