Appendix: Policy Template

Name: Name of The Policy Version: Current Version Number

Classification: What is the classification of this document? Published policies are usually ''PUBLIC," while company procedures maybe "INTERNAL."

Published Date: Date of Publishing

Table of Document History: Insert table of Document History, could include information such as Version Nos, Published Date, Description or Major Changes, Approver Name

Legal Mandate: The Legal Mandate is necessary for documents issued by government or regulators. Corporates may replace it with Background, where they may provide information about why the particular policy has been issued or how it relates to an existing approved policy etc.

Introduction: Provide a brief introduction of the document. It provides a brief needs and justification for having the document.

Scope and Application: Clearly define the scope and application of the document. Who would be covered in terms of persons, business, systems etc.?

Audience: Clearly identify who is the intended audience for the document. Who should read the document?

Policy Statements: Articulate your policy statements here, if it is a standard policy, or articulate your control statements and the control objectives.

Governance (Roles and Responsibilities): Identify how the policy will be governed. Who will have what roles and responsibilities to play?

Enforcement: This is mandatory for a policy document. The disciplinary action in case of non- compliance to the policy should be clearly stated.

Exceptions: This is mandatory for a policy document. Specify how the exceptions to a policy should be managed.

Issuing Authority: For a policy, it is important to state who is the issuing authority. Who will sign the policy statement?

Appendix

Definitions: Supporting information. List out definitions of critical terms used in the policy.

Acronyms: Supporting information. List out the acronyms/abbreviations used in the document and what each stands for.

Supporting Documents: Provide a link to associated procedures/guidelines/forms that will support this document.