YES - Policy version control is important and required for effectiveness and efficiency.
Knowledge Base (KB) articles provide version control. Also, see Managed Documents.
Policy Managers should understand version numbering and approvals workflows for policy document management.
As automation of policy and controls testing evolves, the importance of version control increases.
Formatting for Policy content should be simple for easy of use and clarity.
Pointers - consider ....:
- Take all the GRC Policy and Managed Documents related courses in NOW Learning.
- Multiple standards, frameworks and practice reference models should be considered for policies and controls.
- Subscribing to content from vendors like UCF or C2CSmartCompliance for Authoritative Document references can greatly support your policy and controls efforts.
- For high level/leadership policies, consider a stable foundation based on the COBIT Framework - Objectives book from ISACA. It offers industry-validated content suitable for Policies and Controls - spanning all domains for governance and management.
- Keep IT Simple Smarties (KISS) - looking to good practice references can be more effective and lower cost than customized policies.
- Review the policy and documents topics found in the Product Documentation
- Reminder: take all the GRC Policy and Managed Documents courses in NOW Learning.
