Policies

Home > Applications > GRC > Governance Management > Policies

Index

Introduction

Policies are generally established by a board of directors of an organization to set boundaries under which the organization should operate to to keep the company on track and operating efficiently.

Creating a Policy

• Policy

Name of the policy

• Type

The type of policy. (This list can be modified by a user with the GRC Administrator Role under GRC Simple Lists)

• Objective

The objective of the policy

• In-use Target

The target date for when this policy becomes in-use

• Next Review Date

The date when this policy will be up for review

• Life Cycle

Life Cycles are a collection of automated workflows. This list contains life cycles that only relate to Policies.

• Owner

The owner of this policy. This will default to the user that created the policy

• Risk Register

Select to automatically create a Risk Register or select that a Risk Register is not needed. Automatically created Risk Registers are located in the Operational Risk Registers within Risk Management. A link between the two are maintained.

Policy Document Management

• Manage In

• Maintain Document Here

• Maintain Document Here

• Maintain Document with External Reference

Manage a Policy

Activity

The Activity Stream is provides to allow discussions to take place about the policy. Users are able post notes, comments, discussions, and mention other users.

Details

The majority of information within the Details is the information that was originally captured when the Policy was created. Two additional fields are available after a Policy is created

• Status

The status field allows you to select the current state of the Policy. The default statuses include Implementing, In Place, In Use, Planning, Retired, and Under Review. These statuses can be managed within Administration within the Simple Lists configuration

• Authorizing Users

The users that can participate in authorizing changes or progress of this policy