People, policies and processes