@troed - No idea. But I hate to break it to you, management and policy is actual infosec. Tech folks who wield the tools do so at the behest and direction of the decision makers.