Do your Policies and Procedures reflect what you actually do? If you had to go to court, would you Policies and Procedures show adequate due diligence? Do you regularly update your Policies & Procedures? Would your Policies and Procedures pass an audit?