“Policies should be based on the categorization and classification of privileged accounts specific to your organization. You can find policy templates online so you don’t have to start from scratch,” said Joseph Carson, chief security scientist at Thycotic. http://www.itbusinessedge.com/slideshows/pam-solutions-critical-to-securing-privileged-access-08.html