I can tell you that you should refer to people by job titles (so if someone leaves you don't need to update the policy). For the same reason refer to documents by name and do not include their path on the network in your policy. You can have a separate document that lists where things are that can be changed with minimal hassle, whereas a whole procedure document needs more effort to be changed.
It was a few years ago when I did this, but the ISO 9000/9001 guy was impressed with my work.
