Write a 3 to 5 page paper preliminary work that needs to be conducted prior to developing policy.  For example, asset inventory, vulnerability analysis, risk assessment and so on.