NISP startup policy