Policies

Home > Applications > GRC > Governance Management

Index

Introduction

Establish policies and controls in order to monitor their implementation by the governing body of an organization

Policies

Policies are generally established by a board of directors of an organization to set boundaries under which the organization should operate to to keep the company on track and operating efficiently.

• Policy

Name of the policy

• Type

The type of policy. (This list can be modified by a user with the GRC Administrator Role under GRC Simple Lists)

• Objective

The objective of the policy

• In-use Target

The target date for when this policy becomes in-use

• Next Review Date

The date when this policy will be up for review

• Life Cycle

Life Cycles are a collection of automated workflows. This list contains life cycles that only relate to Policies.

• Owner

The owner of this policy. This will default to the user that created the policy

• Risk Register

Select to automatically create a Risk Register or select that a Risk Register is not needed. Automatically created Risk Registers are located in the Operational Risk Registers within Risk Management. A link between the two are maintained.

Policy Document Management

• Manage In

• Maintain Document Here

• Maintain Document Here

• Maintain Document with External Reference

Policy Statements

• Policy

• Policy Statement

• Type

• Objective

• Status

• Life Cycle

• Owner

• Controls

Policy Document Management

• Manage In

• Maintain Document Here

• Maintain Document Here

• Maintain Document with External Reference

Procedures

• Procedure

• Type

• Summary

• Status

• Life Cycle

• Owner

• Controls

Policy Document Management

• Manage In

• Maintain Document Here

• Maintain Document Here

• Maintain Document with External Reference

Controls

• Type

• Life Cycle

• Owner

Control Source

• Source Type

• Authority Document

• Source Item

Reason For Selection / Implementation

• Business Reason

• Contractual

• Result of Risk Assessment

• Exempt

Implementation

• Complaint

• Implemenation details