We develop the compliant policy; you vet it internally. We can do the editing to further customize the policy if necessary and act in an advisory capacity throughout the implementation process. These policies are not stale, fill in the blank templates. The content directly correlates to the model or framework, e.g., CMMC, FedRAMP, StateRAMP, HIPAA, SOC2, PCI DSS, etc., requirements. We can also assist you with the development of policy related procedures. To stay up to date, we continuously research maturity models, frameworks, laws and regulations and incorporate the latest requirements into each policy that we provide to you. You can either adopt the policy, as is, for your environment or the compliant portions can be integrated into your existing policies.