The policies cover a range of topics from general management (risk assessment and management, document management and legal requirements etc.), to more task and theme specific policies and procedures on a range of critical risk controls.