Policies describe the direction, responsibilities and controls your organisation has adopted. Build a clear policy structure, maintain its content and connect it to the framework requirements and evidence that support your programme.

This chapter covers policy creation, rich-text content, contextual information, categories and controls, framework mapping, analytics, versions and deletion. It also explains how to review incoming framework changes and share a bounded version snapshot.

A written policy needs implementation, communication and review. Keep those activities visible alongside the approved text so readers and reviewers can understand both the requirements and their operational status.

Choose a guide