Take a Portfolio Approach to Policy Management Storyboard
Manage your policies like a portfolio by prioritizing those that mitigate your greatest risks.
- The need for policies should be driven by risks and their impact on your processes.
- You don’t need a policy for everything; focus your efforts on policies that mitigate your greatest risks.
- Your policies should be consistent with one another and provide adequate coverage of your greatest risks without becoming redundant or overwhelming to the user population.
- Communication of a policy is almost as important as the policy itself.