The key to security policy is being able to measure compliance against a set of controls. Security controls define you protect the information. The security policies should define you set the goal. how, why why, how whether, if where, when

since it can be assumed that what aslam is making is a template by compiling all the commonly used excel formatting in several worksheets in an excel document, aslam can choose to save it using the .xltx or .xltm format instead. thus, aslam can distribute the templates he has made to his team members in an easier manner.

(because i need 20 chars)