Compact policy statement:

place this within the http headers section of IIS
CP="OTPi CURi DEVi SAMi OURi IND PHY ONL UNI COM INT DSP COR"