How Well Do You Manage Policies & Procedures?

Our policies and procedures communicate our organization's vision and mission.

Our policies set clear expectations about appropriate conduct and consequences.

Our employees view our policies and procedures as integral to our daily operations.

Our organization's culture reflects our standards of conduct and commitment to compliance.

We use templates to preserve a consistent look and feel across policies.

Policies are written in plain, concise language and are visually accessible.

Document properties such as title, version, owner, dates, and roles are maintained on each policy.

We link policies to related policies, training materials and applicable laws and regulations.

We periodically assess our risks to gauge compliance with applicable laws, regulations, requirements and contracts.

We maintain records of all policies, statuses, dates, changes, versions, attestations, exceptions and enforcement actions.

Policies are partitioned, categorized, tagged, and labeled for distribution and access with a particular audience in mind.

Policies are reviewed and edited by the appropriate stakeholders and content experts.

Prior to being published, policies must be approved by the appropriate personnel.

Employees are notified of new or updated policies and are sent periodic reminders as deadlines approach. Policies are published and displayed where employees can readily view or access them.

All policies are periodically reviewed and updated, according to a schedule.

Policies are regularly reviewed and if updated, labeled with a new version number, and old versions are promptly archived.

Employees have easy access to policies and procedures from anywhere at anytime.

Employees can see all policies that apply to their role and responsibilities and any actions required.

Employees can acknowledge electronically that they have read and understand policies.

We can easily generate reports measuring attestation and comprehension.