1. Policy Overview
Policy Management Practices: A How to Guide & Best Practices

2. Policy vs. Procedures
Policy: Rule or law. This is what the company should live by. It’s the “WHY”
Procedure: More line level in accomplishing the policy accordingly. The “HOW”

3. How to Write Effective Policies
Ensure policies are…
Consistent: Use the same template for each policy
Short: Limit policies and procedures to one or two pages whenever possible. Keep sentences and paragraphs short and simple.
Readable: Use bullets and list to organize information.
Findable: Use descriptive titles to distinguish it from similar documents and make it easy for people to find.
Engaging: Write inactive not passive voice, and use an informal rather that formal tone.
Specific: Do not use vague language when you can be specific. For example, “keeping a certain distance from...” in not as effective as “staying three feet away from…”

4. Prioritizing Policy Development Efforts: Key Questions
Does our current policy communicate executive direction such as vision, mission, values, or objectives?
How critical is the document to achieving our vision, mission, values, and goals?
How integral is the policy to the success, support, and enablement of daily operations?
How urgent is the need for written directions on this particular subject?
How unclear or complex is this issue to the average employee?

5. Managing the Policy Management Life Cycle
Stages of policy management life cycle are:
Create: Use simple, clear, specific language, and easy-to-read formatting.
Review: & Approve: Embrace a continuous process that involves all necessary stakeholders.
Distribute: Take a strategic, proactive approach using multiple distributions channels.
Track: Develop a schedule and alert system to track policy review, and a way to capture attestation.
Update: Outdated policies are a liability; updating must be a priority.

6. Document should be crisp, precise, and to the point.

7. Five Steps to Success
Align policies with compliance, assurance and risk governance objectives.
Align and update policies based on shifts in the regulatory environment.
Define who is accountable throughout the policy life cycle.
Ensure that employees understand and adhere to policies.
Identify and address gaps in compliance and policy exceptions.

8. Policy Management Practices: A How to Guide & Best Practices
If you have any questions or need guidance, please direct them to