Because it is a policy, and we do update, it is presented to the board for approval annually.
Re the security officer,one person should be designated and approved by the board. Name as many assistants as you like but the buck must stop on one person's desk.