. "The CP also addresses the legal liability issues associated with certificates, and there should be input and review of the CP by IT, management, legal and other departments whose operations may be affected." . . . .