It’s not enough to have an anti-harassment and discrimination policy in your manual. It’s not even enough to train everyone regularly on what the policy requires. What really counts is enforcing the policy when complaints come in. If you don’t, the penalty may be punitive damages.