Write an IT security definition for one of the gaps you have not identified a policy for by suggesting how to mitigate the risk involved. Be sure to write a policy statement for this gap that explains how the type of risk should be mitigated. Your policy statement should outline the policy itself, any guidelines or standards that should be adhered to in the policy, and any procedures that must be followed when mitigating the risk.