Enterprises should not be trying to ‘implement’ any specific best practice, but adapting and adopting it to suit their specific requirements. In doing this, they may also draw upon other sources of good practice, such as public standards and frameworks, or the proprietary knowledge of individuals and other enterprises as illustrated in Figure 1.1.