Implementing Information Policy
Making: a high level committee of representatives of all affected areas
Maintaining: a monitoring committee
Disseminating: an ongoing, multilevel user education process that encourages “norms” and “best practices”
Enforcing: a disciplinary process for those who violate policy