2) Describes examples of problems that can occur, if the policy is not followed.
3) Describes the process that must be followed.