Problem: I am trying to develop a DDOS protection policy for a fictitious company called Zentrso. This company is a managed IT services they provide all type of IT services. My job is as a policy developer to develop a policy that satisfies conformity to their customers and respects their service level agreement this policy should be reviewed annually and updated as part of their internal and external audit.