Should organizations have a first principles policy?github.com/cybertheory1 pointcybertheory2 years ago