Policies address risk and they introduce risk. Too many policies bring about a state of over control and possibly non-compliance as the organization cannot manage and monitor the policies in place. Too little policies bring a state of under-control in which the organization does not have sufficient guidance on conduct and behavior. Good policies provide clear operating structures for employees, processes, and business relationships with enough latitude to achieve business objectives.
Attendees will be able to address the following items:
- Determine the need for policy based on the level of risk to the organization
- Determine the need for a policy based on understanding of business objectives
- Determine the need for a policy based on regulatory requirements
- Provide a framework for organizaitons to use to determine if a policy should be written or another policy adapted