"If I understand correctly, we need to have a policy for these guidelines, however, I'm not sure by what date."
FYI - This is not a new requirement and I am surprised that you would have made it through any recent S&S audit without one.
_________________________
The opinions expressed here should not be construed to be those of my employer:
PPDocs.com