Ctrl + K
CM

Policies & Procedures

Manage, review and maintain information security policies and procedures.
24 May 202509:32 AM
Total Policies
124
8 this month
Total Procedures
186
12 this month
Pending Approval
14
2 from last week
Policies Due for Review
23
5 due in next 30 days
Compliance Rate
94.6%
2.1% from last month
Policy Acknowledgement Rate
92.3%
3.4% from last month

Featured Policies

Information Security Policy
v3.2 · Effective: 01 Jan 2025
Access Control Policy
v2.1 · Effective: 15 Jan 2025
Data Classification Policy
v2.0 · Effective: 01 Feb 2025
Incident Management Policy
v3.0 · Effective: 01 Mar 2025
Business Continuity Policy
v2.3 · Effective: 01 Apr 2025

Policy Categories

Information Security
32 Policies
Access Control
18 Policies
Data Protection
22 Policies
Operations Security
20 Policies
Supplier Security
16 Policies
Compliance
16 Policies

Policy Approval Workflow

1. Author / Draft
Policy created and drafted
20
In Progress
2. Review
Under review by stakeholders
14
In Review
3. Approval
Awaiting final approval
7
Pending
4. Published
Approved and published
83
Published

Acknowledgement by Department

AcknowledgedRate
Information Technology
312 / 336 92.9%
Finance
145 / 160 90.6%
Human Resources
118 / 128 92.2%
Operations
210 / 232 90.5%
Sales & Marketing
98 / 112 87.5%
Legal & Compliance
76 / 80 95.0%
Executive Management
28 / 30 93.3%

Policy Revision Trend (Last 12 Months)

  • Policies Created
  • Policies Revised

Upcoming Policy Renewals

Third Party Risk Management Policy Due in 7 days 01 Jun 2025 Overdue
Remote Working Policy Due in 14 days 08 Jun 2025 Due Soon
Acceptable Use Policy Due in 21 days 15 Jun 2025 Due Soon
Mobile Device Policy Due in 26 days 20 Jun 2025 Upcoming
Cryptography Policy Due in 33 days 27 Jun 2025 Upcoming

Policy Health Overview

  • Up to date78 (62.9%)
  • Due for review (<= 30 days)23 (18.5%)
  • Overdue15 (12.1%)
  • Draft8 (6.5%)

Policy Register

Policy IDPolicy NameTypeOwnerVersionEffective DateNext ReviewStatusActions
POL-IS-001Information Security PolicyPolicy
JS
John Smith
CISO
3.201 Jan 202501 Jan 2026Published
POL-AC-002Access Control PolicyPolicy
SJ
Sarah Johnson
IT Security Manager
2.115 Jan 202515 Jan 2026Published
POL-DP-003Data Classification PolicyPolicy
MB
Michael Brown
Data Protection Officer
2.001 Feb 202501 Feb 2026Published
POL-IM-004Incident Management PolicyPolicy
ED
Emily Davis
IT Operations Manager
3.001 Mar 202501 Mar 2026Published
POL-BC-005Business Continuity PolicyPolicy
DW
David Wilson
Business Continuity Manager
2.301 Apr 202501 Apr 2026Published
Showing 1 to 5 of 124 policies