One organization had developed an extensive policy that defined each member's responsibility for reporting information, the terms that would be used for the reporting, and the thresholds that required reporting.