The most important policy for an ITAM program would be the Response to External Audit Requests. Who have performed poorly on our last FEW external audits and have had way too much money paid out in fines, however our policies have not been adjusted to avoid the loss of funds in the future so it will probably continue to happen over and over again