GRC Policy Statements

Home > Applications > GRC > Governance Management > Policy Statesments

Index

Introduction

Policy Statements are a collection of plans and intentions that support a Policy. For example if there was a Password Policy, a Policy Statement might be created for Active Directory minimum password length or password complexity. This list contains all policy statements for all policies. Advanced filtering allows you to display related statements based on a variety of fields.

Create a New Policy Statements

• Policy

Select the Policy that this Policy Statement relates to

• Policy Statement

Provide a name of this Policy Statement

• Type

The type of policy statement. Default values include Boardroom, Corporate, Human Resource, Information Technology, and Workplace (This list can be modified by a user with the GRC Administrator Role under GRC Simple Lists)

• Objective

Provide the main objective of the statement.

• Status

The status of this Policy Statement. Default options include Implementing, In Place, In Use, Planning, Retired, Under Review. (This list can be modified by a user with the GRC Administrator Role under GRC Simple Lists)

• Life Cycle

This option is only available at the time of creation. From here you can select a Life Cycle workflow that will provide automation for different aspects of the life cycle of the Policy Statement.

• Owner

The owner of the Policy Statement. This will default to the person that created the Policy Statement

• Controls

Select Auto Add Control to automatically create a linked control to this Policy Statement. Controls can be manually added later and linked to a Policy Statement.

Policy Document Management

• Manage In

• Maintain Document Here

Once the Policy Statement is created an editor is provided to write and maintain the Policy Statement Document within the policy statement record.

• Maintain Document in Document Manager

This option will require Hornbill Document Manager to be installed. A document will first need to be created in Document Manager and then linked from the Policy Statement record

• Maintain Document with External Reference

A field is provided where a URL to an external document can be specified.