What is your process to respond to misconduct? Once you have established your process, "You are not just publishing it. You're going out and talking about it. You're going around saying this is how we do it and we are committing ourselves to following this process, and that commitment is shown through action. Once you have this process, you have to follow it. You have to follow it. If you ignore it, if you change it, if you just loosely use it as maybe a guideline, then it's useless. You are not getting any of the benefits or protection of that process. It's like building columns to a building without building the building. You have this process that holds up your whole program, and if you don't use it, then it's pointless."