Policy review and acknowledgment

Step by step

1. Prepare version Control Owner

   The Control Owner records the policy version, organization, audience and required reader count, linking the relevant assessment.

   • Identifies version and audience
   • Updates Policy acknowledgements, Assessments, Organizations

2. Submit version Control Owner

   The version moves from draft to submitted at a known revision. The reviewer can compare it with the assessment and its supporting decision.

   • Makes revision ready for decision
   • Updates Policy acknowledgements

3. Record policy decision Independent Assurance Reviewer

   The Independent Assurance Reviewer records the decision date and changes the submitted policy record to approved or rejected. Approval and rejection remain distinct outcomes.

   • Records dated policy outcome
   • Updates Policy acknowledgements
   ApprovalA person approves before the work moves on.

4. Record acknowledgment Control Owner

   The team records the acknowledgment date for the audience and checks the organization's agreed completion rule before marking the record completed.

   • Records audience acknowledgment and completion
   • Updates Policy acknowledgements

Control Owner

, Independent Assurance Reviewer, Auditor, App Administrator.