A policy in a document is unenforceable and unmeasurable. Broken into records, each rule has an owner, a review date, and something an assistant can check a submission against.
What's Included
- One record per rule with plain wording and an owner.
- A review date on each because policy ages badly.
- Rules linked to decisions so you can see which ones actually bite.
- An assistant that finds rules contradicting each other.
How To Use
- Write each rule so it can be answered yes or no. Aspirations cannot be checked.
- Give every rule an owner. An unowned rule is not maintained.
- Review on a cycle. AI capability moves faster than most policy.
- Track which rules cause rejections. The rest may be decoration.
Apply them in the governance office, and check systems against them with risk assessment.
