Comment by akshatpradhan

This is a really good point and I'm not sure why you're being downvoted. Think of it this way, who the heck approves of an Incident Response Policy or an Information Security Policy without reading it? Oh wait, your downvoters would approve an Incident Response Policy without reading it, /facepalm.