Policies and procedures need to follow the KIS approach.
Keep It Simple.
What else should you do?
Listen to Greg Caporelli to find out.