Please mark ‘No’ on any question which you are unsure of the answer for. Do not hesitate to answer No, as this is a perfectly acceptable answer, since the key here is to be as honest as possible. Also, ‘No’ would be a necessary answer if you have only a procedure in place but not the policy. Last, ‘No’ would be a necessary answer if you happen to have both the policy and procedure in place but they are over 3 years old.
For any answer of ‘Yes’ be sure to place a brief explanation of why your answer was ‘Yes’ in the field mid-screen labeled ‘Auditor Notes.’