What Describes the Specific Information About a Policy?
The specific information about a policy is the policy statement (e.g., policy content).
A well-written policy is concise, yet comprehensive, where it provides clear guidance without detailing standards and/or procedures, which are documented separately.
- Policies are high-level statements of management intent from an organization’s executive leadership that are designed to influence decisions and guide the organization to achieve the desired outcomes;
- Policies are enforced by standards and further implemented by procedures to establish actionable and accountable requirements;
- Policies are a business decision, not a technical one. Technology determines how policies are implemented; and
- Policies usually exist to satisfy an external requirement (e.g., law, regulation and/or contract).