[alkonaut]

99% of corporate policies are to be able to point to a document that says "well it's not my fault, I made the policy and someone didn't follow it".

[marginalia_nu]

You don't even need to go as far as saying someone didn't follow the policy, you can just say you need to review the policies. That way, conveniently enough, nobody is really ever at fault!