Discuss at least four (4) best practices for IT infrastructure security policies in domains other than the User Domain. Pick one domain outside the user-domain to focus on. Address the following topics using your own words:

IT framework selection
When to modify existing policies that belong to other organizations versus creating your own policies from scratch
Policy flexibility
Cohesiveness
Coherency
Ownership