The Information Security Policy and related policies only apply to electronic and hardcopy records and do not apply to verbal discussions