MDM policy and practice