Although the latitude granted to business units varied, providing both policies and guidelines allowed business units to tailor the guidelines to their own individual unit's information protection needs.
Business units that are provided with policies and guidelines allowed for the tailoring of such guidelines to their own information protection needs.
The latitude did not grant business units the right to have policies nor guidelines.