Ensure that security policies and operational procedures for managing firewalls are documented, in use, and known to all affected parties.