Do operational policies and procedures require board approval?