I do not need a solution (just sharing information)
I know I posted this already in response to another post...
...but I've just looked through this doc again in more detail, and it really does deserve to be posted on it's own, it really is rather good.
It appears to be an official Symantec document, but who knows how long it will be available on this 'other' site...
...so, get it while you can: