Outline that in most cases, policy development is comprised of three parts:
Designed and written
Senior management or an executive along with legal counsel reviews and approves the document
Management processes developed in the final state, which, in turn, results in policy enforcement within the organization
Emphasize the importance of security managers using all resources available to create policies, but give credit where it is due when referencing external sources outside of the organization.