Create A New Policy

RiskVision provides organization content, including templates, that help create policies that you can tailor to your organization's individual needs. You can also create policies from scratch and import existing policy documents. In order to perform these operations, you should have the Policy View and Policy Author permissions. Users with Policy Manage permission can also create new policies.

To create a new policy, select the destination policy group in the Organization Content tree, then click New. Policies can also be created under content packs or control groups.

The Create a Policy Document wizard includes the following steps:

  • General;

  • Workflow;

  • Ownership; and

  • Review Recurrence. 

General

Enter a name, identifier and description for the new policy and choose a Policy Template that will define the initial structure of sections and subsections for the new policy.

Workflow

Workflow is optional for policies. You can create a policy without workflow, or associate a workflow with a policy later.

To apply a workflow to a policy, select an existing Workflow Template, or click Create a new template. The wizard displays the workflow stages (such as Draft, Review, Approval, Deploy) from the template for your review.

Creating a New Policy Workflow Template

When you create a new policy workflow template, you can identify a number of stages and a set of stakeholders for each stage. Stakeholders can include specific users, policy roles (such as Policy Approver or Policy Author), or teams.

For more information, see About Policy Workflow.

Ownership

The user creating the policy is the primary owner by default, but you can choose another user to be the primary owner. To add additional owners, click Add Owners. The wizard displays the list of all owners for your review. Primary owners are the stakeholders who will receive notifications when the policy enters a particular stage.

Review Recurrence

Policies are often re-evaluated on a regular basis. Specify how often the policy is to be reviewed (for example, Never, Monthly, Quarterly, and so on).

Click Notification E-mail Template from the dropdown menu to be used to remind policy owners of the need to re-evaluate the policy.