Policy 3309 – IT Security