"Don't give non-employees admin privileges on your system" doesn't really sound like an HR policy. It would have been a good policy, though.