Search your institution's intranet or Web sites for its security policies. Do you find an enterprise security policy?
What issue-specific security policies can you locate?
Are all of these policies issued or coordinated by the same individual or office, or are they scattered throughout the institution?